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YEAR 2000: BIGGEST PROBLEMS AND 
PROPOSED SOLUTIONS 


MONDAY, JUNE 22, 1998 

House of Representatives, 

Subcommittee on Government Management, 

Information, and Technology, 
Committee on Government Reform and Oversight, 

Washington, DC. 

The subcommittee met, pursuant to notice, at 1:03 p.m., in room 
2154, Rayburn House Office Building, Hon. Stephen Horn (chair- 
man of the subcommittee) presiding. 

Present: Representatives Horn, Davis, and Kucinich. 

Staff present: J. Russell Geo^e, staff director and chief counsel; 
Bob Alloway, professional staff member; Matthew Ebert, clerk; 
Faith Weiss, minority counsel; Brian Cohen, minority professional 
staff member; and Ellen Rayner, minority chief clerk. 

Mr. Horn. The Subcommittee on Government Management, In- 
formation, and Technology will come to order. 

I begin today with an organizing concept on the year 2000 prob- 
lem. We can break the year 2000 problem into five stages: Startup, 
easy work, hard work, final preparation, and aftermath. 

TTie subcommittee helped initiate the first startup stage with the 
first congressional hearing on the year 2000 subject in April 1996. 
We moved into the second stage of easy work during 1997 and 
made some process, implementing fixed and tested systems. By 
May 15, 1998, the Federal Government was up to 39 percent com- 
pliant for mission critical systems. 

As of today, we are moving into the third stage of hard work. 
This stage will last about 1 year, until the spring of 1999. Then, 
we will move into the fourth stage of final preparation. 

I characterize these stages because they represent different t 3 T)es 
of tasks and priorities, as well as solutions. In the first awareness 
stage, the task was convincing people that this was a real problem 
and they should take it seriously. In the second easy work stage, 
the task was developing processes for progress reporting, deter- 
mining which systems are mission critical, code remediation, con- 
tracting, and automated tools. 

Now, as we move into the third stage of hard work, the tasks, 
priorities, and solutions will shift once again. We have gathered a 
group of expert witnesses to look forward to this next stage to dis- 
cuss what will be the highest priorities and, hopefully, get some in- 
sight into their solutions. 

There is not enough time to do everything. There are too many 
problems contending for top priority. We must be careful in the se- 

( 1 ) 
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lection of the most important problems. We cannot afford to work 
on second-tier problems when first-tier problems are being simply 
ignored. We must be careful in the selection of the most realistic 
solutions. We cannot afford to make matters worse with unin- 
tended consequences. 

So today we have gathered together expert witnesses from dif- 
ferent perspectives, from the public and private sectors, policy- 
makers, project managers, legal and financial experts, and domes- 
tic and international perspectives. We will discuss the same ques- 
tion across all these perspectives: What are the highest priority 
problems for the next stage of the year 2000 problem? 

As I have said many times, and I think everybody is saying it 
now, this is not a technical problem, it’s a managerial problem 
leading to practical actions. There is no doubt that the year 2000 
problem is real. It isn’t a figment of someone’s imagination. There 
is no doubt that all systems will not be compliant in time. Our re- 
sponsibility as a congressional oversight committee is to decrease 
the impact on the American people. We must cut the number of 
system failures in half and, then, cut that in half again. 

From a legislative point of view, the year 2000 problem is 
unique. For most issues. Congress has the luxury of refining legis- 
lation again and again, over the course of decades. For the year 
2000 problem. Congress will not be able to pass legislation, see how 
it works for a couple of years, and then, amend as necessary. 

Identification of top priority year 2000 problems will not nec- 
essarily result in legislative action. However, any suggested legisla- 
tive measures from this panel or any other source must be more 
carefully considered. The normal opportunities to correct unin- 
tended consequences are precluded by the short time remaining be- 
fore the deadline. 

This problem has evolved since our first subcommittee hearing 
on April 16, 1996. At first, it was a few lone individuals explaining 
the inevitable technical consequences of a two-digit year calculation 
in the next millennium. Now there is a whole range of voices, from 
every direction with thousands of anecdotes. 

At first, the priority action was simple, raise awareness and start 
working. Now priorities must be carefully considered. We must dis- 
tinguish the possible from the likely, rank order by impact, take 
into account the availability of work-arounds, include the con- 
sequences of failures on other systems, and remember practicality 
and the laws of unintended consequences. This hearing asks some 
of the leading experts for their carefully considered top priorities 
and recommended solutions. 

Our first panel includes the following witnesses: Edward DeSeve, 
the Deputy Director for Management, Office of Management and 
Budget; Dr. Rona Stillman, Chief Scientist for Computers and Tele- 
communications, General Accounting Office; Dennis Grabow, the 
chief executive officer of the Millennium Investment Group; Dan 
Steinberg, president. Synthesis: Law and Technology; Alan Simp- 
son, president, ComLinks; Bruce Webster, chief technical officer. 
Object Systems Group, and director of the Washington, DC Year 
2000 Group; and Tom McCabe should be here, I believe, yes, a lit- 
tle out of order, chairman, McCabe & Associates. 
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We will go in the order in which we have it on the agenda. As 
you perhaps know, some of you have been here before, since it is 
a subcommittee of the Committee on Government Reform eind 
Oversight, you need to stand and raise your right hands, and take 
the following oath. 

[Witnesses sworn.] 

Mr. Horn. I will note for the clerk that all seven witnesses have 
affirmed. We will now begin in the order you are on the agenda. 

Mr. DeSeve, the Deputy Director for Management, Office of Man- 
agement and Budget. 

[The prepared statemSnt^f Hon. Stephen Horn follows:] 
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I begin today with an organizing concept of the stages in the Year 2000 problem. We can 
break the Year 2000 problem into five atagesi 

1. start-up 

2. easy-work 

3. hard- work 

4. final preparatioo, and 

5 . theatennaih. 

This subcommittee helped initiate the fust start-up stage with the first Congressional hearing on 
die Year 2000 subject in April of 1996. 

We moved into the second stage of easy-work during 1997 and made some progress 
implementing fixed and tested systems. By May 15 of 199S. the Federal Government was up to 39% 
compliance for nussion-crifical systems. 

As of today, we are moving into the diird stage of baid-work. This stage will last about one 
year, until the spring of 1999. Thai, we will move into the fourth stage of final preparatitw. 

I characterize these stages becauae they represent different types of tasks, priorities, and 
sohicitxis. In Ae first awareness stage. Ac task was convincing people that the problem was real and 
serious. In the second easy work stage, the task was developing processes for progress reporting, 
detennimng which systems are miasioo-cricical, code remediation, contracting, and automated tools. 

Now, as we move into Ae tturd stage of bard work, the tasks, priorities, and solutioas will shift 
once again. We have gaAeied a group of expert witnesses to look forward to this next stage - what 
will be the highest priorities and, hopefully, some insight into their solutioos. 

There is not enough time to do everyAing. There are too many problems contending for top 
priority. We must be careful in Ae selectkm of most unponant problcins. We can not afford to 
work on second tier problems, when first tier probiems are being ignored. 

We must be careftd in Ae selectioo of the most realistic solutioDS. We can not afford to make 
matters worse wiA uniotended consequences. 
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We have gathered together expert witnesses from different per^)ectives - from the public and 
private sectors, policy maken and project managers, legal and financial, and domestic and international 
perspectives. We will discuss the same question across all these perspectives: What are the highest 
priority problems for the next stage of the Year 2000 problem? 

Ihis is not a technical discussion, radier, it is managerial, leading to practical actions. There is 
no doubt the Year 2000 problem is real. There is im doubt that ail systems will NOT be compliant in 
time. Our responsibility is to decrease the impact on the American people. We must cut the number of 
system failures in half; and then, cut it in half again. 

From a legislative point of view, die Year 2000 problem is unique. For most issues. Congress 
has the luxury of refining legislation again and again over die course of decades. For the Year 2000 
problem. Congress will not be able to pass legisladoo; see how it works for a couple of years; and then 
amend as necessary. 

Identificatioo of priority Year 2000 problems will not necessarily result in legislative 
action. However, any suggened legislative measures from this panel, or any other source, must be 
more carefully coosideied. The normal opportunities to correct unintended consequences are precluded 
by the short time remaining before the deadline. 

Hiis problem has evolved since our first subcommittee bearing on Year 2000 on April 16, 

1996. At fir^ it was a few lone individuals explaining the inevitable technical consequences of two 
digit year calculations in the next millennhim. Now. there is a cacophony of voices from every 
direction with thousands of anecdotes. 

At first, the priori^ action was single *• raise awareness and start working. Now, priorities 
must be carefully considered. We must distinguish the possible from the likely; rank order by impact; 
take into account the availability of work-arounds; include the consequences of failures on other 
systems, and remember practic^ity and the laws of unintended consequences. 

This hearing aAx some of the leading experts for their carefully considered tc^ priorities and 
recommended solutions. 


2 
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STATEMENT OF EDWARD DeSEVE, DEPUTY DIRECTOR FOR 
MANAGEMENT, OFFICE OF MANAGEMENT AND BUDGET 

Mr. DeSeve. Thank you very much, Mr. Chairman. 

I am here today to discuss the Federal Government’s efforts to 
address the year 2000 problem. As you know, the seemingly simple 
problem is one of the great challenges confronting our Nation 
today. Let me begin by expressing my support for the work of this 
committee. You have been and are playing a key role in helping to 
address this critical issue. 

By way of background, Executive Order 13073, Year 2000 Con- 
version, created the President’s Council on the Year 2000 Conver- 
sion, chaired by Assistant to the President, John Koskinen. 'The 
council has a twofold mission: First, to assist Federal agencies as 
they work to prepare their systems for the new millennium; and 
second, to increase awareness of the problem among private sector 
entities. State and local governments, and international organiza- 
tions. 

We at 0MB are working ve^ closely with the council. While 
0MB continues its role of oversight of Federal agency progress on 
fixing the internal year 2000 problem, the role of the Council has 
been to increase awareness beyond the Federal Government. 

The invitation letter today asks that I discuss practical solutions 
to high priority activities. Accordingly, I would like to identify our 
top management priorities and the practical solutions that we are 
undertakiM. This afternoon I would like to describe five of those 
priorities: First, dealing with mission critical systems; second, data 
exchanges; third, embedded chips; fourth, continuity of business 
planning; and fifth, international and national readiness, and dis- 
cuss each of those briefly. 

The first priority I would like to mention is that of fixing mission 
criticail systems. Overadl, the Federal Government continues to 
make progress, but at the rate of some agencies’ progress is not 
fast enough. Aa you know, OMB has characterized agencies into 
one of three tiers. Although 71 percent of the mission critical sys- 
tems of tier 3 agencies are compliant, only 33 percent of those in 
tier 1 agencies are compliant. It’s critical that those agencies most 
at risk devote more mainagement attention to fixing the problem. 

We in the administration are taking practical steps to improve 
the progress of these agencies. First, for all cabinet agencies that 
are not making sufficient progress, the chairman of the Year 2000 
Conversion Council and OMB staJff will personally participate in 
monthly progress briefings with senior management of each tier 1 
cabinet agency. In addition, we have asked the tier 1 and tier 2 
agencies to provide OMB their plans for monthly progress toward 
making their mission critical systems compliant, and that they pro- 
vide monthly progress r^orts against those plans. 

The plans are due to OMB on Friday, June 26, and the monthly 
progress reports will be due on the 10th of each month, beginning 
in August. As a practical matter, Mr. Chairman, as we have in the 
past, we will maJte this information available to the committee on 
a timely basis. 

Data exchanges. Another priority is coordinating and managing 
exchanges of data with those outside the Federal Government. It 
is essential that exchange partners agree on changes to the format 
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of exchanges, as well as the timing of such exchanges. Federal 
agencies have more than 10,000 such exchanges with each other, 
with foreign. State and local governments and private entities. 

In response to this problem, we do hope for a close working rela- 
tionship with org£uiizations such as NASIRE, the National Associa- 
tion of State Information Resource Executives, and the National 
Governors’ Association. 

As a practical first step, we directed agencies to inventory all of 
their data exchanges by February of this year, and to begin discus- 
sions with their exchange partners. The deadline for them to up- 
date all of these exchanges is March 1999, however, beginning in 
July, Federal agencies will incorporate into the inventory the sta- 
tus of each exchange. The status will be reported by State and will 
include whether the exchanges are compliant or not. 

Embedded chips. An additional priority is that of addressing the 
embedded chip problem. As you Imow, this is the great unknown 
about the year 2000 problem. People are finding embedded chip 
problems in a wide array of unexpected noncomputer places. Last 
week, for example, I read about a number of chip problems that 
could affect the operation of cargo tankers. At this point, it appears 
that virtually any large piece of machinery could have an embed- 
ded chip problem. While much of the work in identifying embedded 
chips and contacting the manufacturers of the product must be 
done individually by agency, in some cases, a governmentwide ap- 
proach is more practical. 

One solution has been to establish through the Chief Information 
Officers Council interagency working groups in the areas such as 
biomedical devices and laboratory equipments, commercial prod- 
ucts, telecommunications and building. Each group is chaired by 
key agency personnel, and listed in my testimony are the web sites 
to these groups. Once an agency finds that a product is either com- 
pliant or noncompliant, in terms of embedded chips, the web site 
is the mechanism for posting this information. 

The next priority I would like to highlight is the continuity of 
business planning. No matter how well Federal agencies progress 
between now and January 1, 2000, there is no question there will 
be some problems. As a practical solution to this problem, the CAO 
Council’s Year 2000 Committee and the General Accounting Office 
are developing a draft ^ide on continuity of business planning. 
Such planning is to address, in addition to the risk of failure of 
agencies’ internal systems, the implication of the year 2000 prob- 
lem that are outside of the agencies’ control. In addition, we will 
shortly require agencies to provide us with more detailed informa- 
tion on both their continuity of business plans, as well as contin- 
gency planning for those systems that are expected to miss the 
March 1999 deadline for implementation. 

National and international preparedness. The Council imple- 
mented a practical solution by reaching out to many complex con- 
stituencies and groups and by building on existing organizational 
relationships. The Council has identified roughly 30 economic sec- 
tors and enlisted agencies with policy interests or connections to 
those areas to serve as coordinators. These areas are critical be- 
cause everyone is dependent on them; thus, the energy group is co- 
chaired by the Department of Energy, the Federal Emergency Reg- 
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ulation Commission is looking at gas and oil, telecommunications 
is being worked on by FCC, et cetera. Meanwhile, the State De- 
partment is taking the lead overall in raising awareness inter- 
nationally. For example. Secretary Albright recently sent to all 
U.S. Ambassadors a cable that designates them as the U.S. Year 
2000 Coordinator in their host country and instructs them to deter- 
mine the Y2K readiness of these countries. 

Year 2000 funding. In order to implement these and other prior- 
ities, 0MB will continue to assist all agencies in assuring that ade- 

S ' ‘ resources are available to address this critical issue. In the 
year 1999 budget, the President has requested more than $1 
billion for a Y2K computer conversion. In addition, the budget an- 
ticipated that additional requirements would emerge over the 
course of the year and, in a practical way, included em allowance 
for emergencies and other unanticipated needs. 

At this time, we believe the resource levels included in the Presi- 
dent’s budget will fully address the year 2000 conversion problems 
govemmentwide. However, our experience has been, as we learn 
more about how to address these problems, we expect that ensur- 
ing govemmentwide compliance will require flexibility to respond 
to unanticipated requirements. To the extent such unanticipated 
requirements are identifled, it will be essential to make sure that 
funding is available quickly and will truly be emergency funding. 
The emergency mechanism recently approved by the House Appro- 
priations Committee provides such flexibility. We are encouraged to 
learn the Senate Appropriations Committee is also expected to ap- 
prove such a mechanism. 

As action on the various appropriation bills proceeds, we urge 
Congress to leave as much as possible of the emergency contingent 
reserves unallocated so funds are available to address emerging 
needs. It is our understanding when the House Rules Committee 
meets on Tuesday to take up the Defense and Treasury/General 
Government appropriations bills, they will report rules that will 
strip the emergency funding mechanisms from both bills. This is 
regrettable action and will not help agencies move forward in ad- 
dressing the problem. The value of the emergency mechanism ap- 
proved by the House Appropriations Committee is the flexibility it 
provides in the event we determine that additional requirements 
are required. We have only 557 days left. We want to solve the 
problem as soon as possible. By delaying approval of emergency 
funding and reopening the issue of the use of the emergency spend- 
ing authority, the House would create controversy and delay. We 
hope the House will reconsider. 

That concludes my testimony, Mr. Chairman. I would be de- 
lighted to take questions either now or at the end of the panel. 

[The prepared statement of Mr. DeSeve follows:] 
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EXECUTIVE OFFICE OF THE PRESIDENT 
OFFICE OF MANAGEMENT AND BUDGET 
WASHINGTON. QC 20503 

STATEMENT OF G. EDWARD DESEVE 
ACTING DEPUTY DIRECTOR FOR MANAGEMENT 
OFFICE OF MANAGEMENT AND BUDGET 
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COMMITTEE ON GOVERNMENT REFORM AND OVERSIGHT 
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UNITED STATES HOUSE OF REPRESENTATIVES 
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Good afternoon. I am here today to discuss the Federal government’s efforts to address 
the year 2000 problem. As you know, this seemingly simple problem is one of the great 
challenges confronting our nation today. Let me begin by expressing my support for the work of 
this Committee. You have been and are playing a key role in helping to address this critical 
issue. 


By way of background, E.O. 13073, Year 2000 Conversion, created the President’s 
Council on Year 2000 Conversion, chaired by an Assistant to the President, John ICoskinen. The 
Council has a two-fold mission: to assist Federal agencies as they woiic to prepare their systems 
for the new millennium and to increase awareness of die problem among private sector entities, 
State and local governments, and international organizations. 

We at OMB are working very closely with the Council. While 0MB continues its 
oversight of Federal agency progress on fixing the internal year 2000 problem, the role of the 
Council has been to increase awareness beyond the Federal government. Therefore, today I will 
discuss our efforts to help Federal agencies fix their internal year 2000 problems while also 
touching on the national and international efforts of the Council. 

The invitation letter asks that I discuss ‘‘practical solutions to high-priority activities.” 
Accordingly, I would like to identify our top management priorities and the practica] solutions 
that we are undertaking. This afternoon, I would like to describe five of those priorities — 
mission-critical systems, data exchanges, embedded chips, continuity of business planning, and 
national and international readiness - and briefly discuss the practical solutions that we have 
underway. 

Mi^ion.cri tical Systems 

The first priority 1 would like to mention is that of fixing mission-critical systems. 
Overall, the Federal government continues to make progress in addressing the year 2000 problem 
— but the rate of some agencies is still not fast enough. As you know, OMB has categorized 
agencies into one of three tiers based on evidence of adequate progress. Although 7 1 percent of 
the mission-critical systems of the tier 3 agencies are compliant, only 33 percent of those of the 
tier I agencies are compliant. It is critical that those agencies at most risk devote more 
management attention to the problem in order to ensure that solving it is the agency’s highest 
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We m the Adimmstration are taking practicai steps to improve the progress of these 
agencies First, for all the Cabinet ^encies that arc not making sufficient process, the Chairman 
of the Year 2000 Conversion Council and OMB staff will personally participate in monthly 
progress briefings with the senior management of each tier 1 Cabinet agency. This way we can 
provide on-the-spot practical help to Departmental management in addressing any problems that 
may be slowing their progress. 

In Edition, we have asked the tiw I and tier 2 agencies to provide to OMB ihdr plans for 
monthly progress towaM making their mission-critical systems compliant, and that they provide 
monthly rqrorts on their progress against those plans. The plans are due to OMB on Friday, June 
26, and the monthly progress reports will be due on the tenth of each month beginning in August. 
This is a practical way to monitor the agencies at highest risk more closely, without imposing a 
substantial new rqiorting burden on them. We will include summari^ of this information in 
future OMB quarterly rq>orts. 

Data Exchanges 

Another priority is coordinating and managing exchanges of data with those outside the 
Federal government. It is essential that exchange partners agree on changes to the format cf 
exchanges, as well as the timing of such changes. Federal agoicies have more Aan 1 0,000 such 
exchanges with each other, with foreign. State, and local governments; and with private entities. 
Of particular importance are data exchanges with the States, because States operate many 
important Federal programs. 

In response to this problem, we have developed a close working relationship with 
organizations such as the National Association of State Infonnation Resource Executives 
(NASIRE) and the National Governors Association. As a practicai first step, we directed 
agencies to inventory all of titeir data exchanges by February of this year and to begin 
discussions with their exchange partners by March. In their most recent reports to us, all 
agencies say they have inventoried their exchanges and initiated discussions with their partners. 
The deadline for them to update these exchanges is March 1999. 

In addition, the Chief Information Officers (CIO) Council has been working with 
N^IRE to assure that &cse exchanges will work. This spring, Federal agencies provided the 
Sta^ with an inventory of Federal/State data exchanges. The States are in the process of 
verifying that the inventory is complete. Beginning in July, Federal agencies will incorporate 
into the inventory the status of each exchange. The status will be reported by State and will 
include whether the exchange is compliant, whether the fix is permanent or interim, and whetoer 
the fix has been tested. This information will be updated monthly and will provide us with 
useful, practical information about bow well agencies are doing in preparing their d^ 
exchm^s. 


2 
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Embedded Chios 

An additional priority is that of addressing the embedded chip problem. As you know, 
this is the great unknown about the year 2000 problem. People are finding embedded chip 
problems in a wide array of unexpected, non-computer places. Just last week, for example, 1 
read about a number of chip problems that could affect the operation of ships. At this point it 
appears that virtually any large piece of machinery or any complex process needs to be assessed 
to see if it will be impacted by an embedded chip problem. It is important to note that in these 
instances the problem occurs in commercial products that rely on computers or have computer 
chips inside them. Therefore, unlike fixing custom software, these problems, while identified by 
agencies, usually need to be fixed by the manufacturers of those products. 

While much of the work of identif^g chip problems and contacting the manufacturers 
of the products must be done individually by each agency, in some cases a government-wide 
^rptoach is mote practical. One solution has been to establish, through the CIO Courtcil, 
interagency working groups in the areas of bio-medical devices and laboratory equipment, 
cotrunercial products, telecommunications, and buildings. Each interagency working -group, 
chaired by a key program agency, is tasked with raising awareness across government and 
working with manufiicturets to assure that products are fixed. Each group is contacting vendors 
on behalf of the entire Federal government, performing tests to verify the compliance of 
products, and sharing information through electronic databases. This information is publicly 
available at these websites; 


FDA site on biomedical devices 
GSA site on cotrtpliant commercial products 
GSA site on telecommunicatiotis equipment 
GSA site on buildittgs and facilities 


www.fda.gOv/cdrh/yr2000 

htq>://y2k.policywoiks.gov/ 

http://y2k.fts.gsa.gov/ 

http://globe.Imi.org/lmi_pbs/y2kproducts/ 


Continuity of Business Plans 


The next priority that I svill highlight is continuity of business planning. No matter bow 
well Federal agencies progress between now and January 1, 2000, there is no question that there 
will be some problems. This is true both for ^encies that complete their work on the problem as 
well as those that do not Therefore, as a practical matter, agencies need to begin planning now 
to assure the continuity of their cote business functions. 

'• Asa practical solution to this problem, the CIO Council’s Year 2000 Committee and the 
General Accountirtg Office ate developing a draft guide on continuity of business planning. 

Such planning is to address, in addition to the risk of fidlure of ftie agency’s internal systems, the 
implications of the year 2000 problem that are outside of the agency’s control, such as the 
inability of supplien to provide products or the failure of critical in&astructures. In addition, we 
will shortly require agencies to provide os with mote detailed information on both their 
continuity of business plans as well as contingaicy planning for those systems that are expected 
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to miss the March 1999 deadline for implementation 
National and Intematio nal Preparedness 

A final priority of the Council is to promote national and international preparedness. 
Because of the intraeonnected nature of our technology dependent world, the Council has 
realized how important it is that our country as a whole be prepared - and that the world is 
ready, too. 

The Council implemented a practical solution to the problem of reaching out to so many 
complex constituencies and groups by building on existing organizational relationships among 
agencies and outside poups. The Council has identified rou^ly 30 economic sectors and 
enlisted agmcies who have poUcy interests in, or connections to, diese ar^ to serve as 
“coordinators,” to increase awareness of the problem and to offer support. The list of sectors 
includes energy, telecommunicatioiis. and financial institutions. These areas are critical because 
everyone is dependent on them. Thus, the energy sector group is co-chaired by the Department 
of Energy, which is looking at electric power, and the Federal Energy Regulatory Commission, 
which is looking at oil and gas. The telecommunications sector group is co-chaiied by the 
Federal Communications Commission and the Genera] Services Ad^nistration, and the 
financial institutions sector group is chaired by the Federal Reserve Board. 

In many cases, agencies have a natural constituency. In other cases, agencies have been 
tasked with reaching out to groups that the Federal government doesn’t traditionally do business 
with. White some agencies have a regulatory role, sU agencies have a responsibility to make 
sure that they groups they are in contact with are ready and to ensure that there are no gaps in 
coverage. 

in the international arena, the Chairman of the Council has met with the United Nations 
Informatics Working Group on this issue; he has also met with the Chair of the World Bank, who 
subsequently issued a letter to the leaders of all member nations on this subject. We have met 
with the year 2000 representatives from a numba- of nations, including Mexico, South Afiita, 
England, and Canada. 

Meanwhile, the State Department is taking the lead overall on raising awareness 
internationally. For example. Secretary Albright recently sent to all U.S. ambassadors a cable 
that designates them as U.S. year 2000 coordinators in their host countries and instructs them to 
deteimine the year 2000 readiness of those coimtries’ basic infiastruc tures. The Federal Aviation 
Administration has met with its intemational counterparts, while the Federal Communications 
Commission has been working with the International Telecommunications Union. 

While the Fed«al government is reaching out to a large number of organizations, both 
domratic and intemational, it is important to note that it has no authority to directly intervene in 
most of these areas. Therefore, the most practical approach for the Council to take is to raise 
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awareness and to facilitate the flow of infonnation help organizations fulfill their responsibilities 
to make sure their systems work. 

Year 2000 Funding 

0MB will continue to assist all agencies in ensuring that adequate resources are available 
to address this critical issue. In the FY 1999 Budget, the President has requested more than $1 
billion for Y2K computer conversion. In addition, the Budget anticipated that additional 
requirements would emerge over the course of the year, and included an allowance for 
emergencies and other unanticipated needs. 

At this time, we believe that the resource levels included in the President's budget will 
fully address Y2K. computer conversion requirements Government-wide. However, as we learn 
more about how to address this problem, we expect that ensuring Government-wide compliance 
will require flexibility to respond to unanticipated requirements. To the extent such 
unanticipated requirements are identified, it will be essential to make that funding available 
quickly. It will truly be emergency funding. 

The emergency mechanism recently ^iproved by the House Appropriations Committee 
provides such flexibility. We are encouraged to learn that the Senate Appropriations Committee 
is also expected to ^prove such a mechanism. As action on the various appropriations bills 
proceeds, we urge Congress to leave as much as possible of the emergency contingent reserve 
unallocated so that funds are available to address CTterging needs. 

It is our understanding that when the House Rules Committee meets on Tuesday to take 
up the Defense and Treasury/General Government Appropriations bills they will report rules that 
will strip the emergency funding mechanism from both bills. This regrettable action will not 
help agencies move forward in addressing this problem. 

The value of the emergency mechanism approved by the House Appropriations 
Committee is the flexibility it provides in the event that we determine that additional resources 
are required. We have only 557 days until January 1, 2000. We want to solve this problem as 
soon as possible. By delaying approval of emergency funding and reopening the issue of the use 
of the emergency spending authority, the House will create controversy and delay. We hope the 
House will reconsider. 

MoVing Forward 

There is no doubt the year 2000 problem poses a significant challenge to Federal agencies 
and to our nation as a whole. But 1 am confident Federal agencies will live up to their end of the 
bargain, both in fixing their internal year 2000 problems and in increasing awareness beyond the 
Federal Government. 
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I thank the committee for its continued interest in the year 2000 problem You are 
makmg a valuable contnbutioD to the public dialogue about this matter 1 look forward to 
working with you, and I would be happy to answer any questions that you may have. 


6 



15 


Mr. Horn. Well, we will do it at the end, but let me just make 
two remarks. The Speaker is the person that speaks for the House 
of Representatives, at least a majority in the House, and the 
Speaker is very determined to have this come, every dollar you 
want, to have the emergency provisions invoked. So I think that is 
either misplaced, old news, or whatever. But that will be taken 
care of. We don’t intend to deny you 1 penny, despite 2 or 3 years 
of procrastination, to be blunt about it. You are going to get every 
dime you need. 

Now, let me just ask one question. You mentioned you would 
give us those quarterly reports on a timely basis. 

Mr. DeSeve. Monthly reports, sir. 

Mr. Horn. Monthly reports, l^at is your view of timely? 

Mr. DeSeve. Within 7 working days. We need to get them in, 
look at them, and there may be some dialog with the agencies if 
the reports are not responsive, but 7 working days from the time 
at which they are submitted, both the plans and the reports. 

Mr. Horn. Well, I frankly would hope we would get the reports 
at the same time. I think, as I have told John Koskinen, I said, 
John, you don’t have time for quarterly reports or monthly reports, 
you need a weekly report if you are going to be serious about this, 
so I would hope that the reports would come up to us in 24 hours. 

All right. Let us go down to the second witness. Dr. Rona 
Stillman, chief scientist for computers and telecommunications. 
General Accounting Office. 

STATEMENT OF RONA STILLMAN, CHIEF SCIENTIST FOR COM- 

PUTERS AND TELECOMMUNICATIONS, GENERAL ACCOUNT- 
ING OFFICE, ACCOMPANIED BY JOEL WILLEMSSEN, DIREC- 
TOR, ACCOUNTING AND INFORMATION MANAGEMENT DIVI- 
SION, GENERAL ACCOUNTING OFFICE 

Ms. Stillman. Mr. Chedrmem and members of the subcommittee, 
thank you for inviting me to participate in today’s hearing on the 
year 2000 problem. Because of the urgent nature of the year 2000 
problem and the potentially devastating impact it coula have on 
critical government operations, we designated the problems a high 
risk area for the Federal Government in February 1997. Since that 
time, we have issued over 40 reports and testimony statements de- 
tailing specific findings and recommendations related to year 2000 
readiness of a wide range of Federal agencies. We have also issued 
guidance to help organizations successfully address the issue. 

Today I will briefly discuss our major concerns with Govern- 
ment’s progress in fixing its systems, highlight the year 2000 risks 
facing the Government and introduce our guidance on year 2000 
testing, which was designed to assist agencies in the most exten- 
sive and expensive part of remediation. Overall, the CSrovemment’s 
24 major departments and agencies are making slow progress in 
fixing their systems. 

In May 1997, the Office of Management eind Budget reported 
that about 21 percent of the mission critical systems for these de- 
partments and agencies were year 2000 compliant. A year later, in 
May 1998, these departments and agencies reported that about 40 
percent were compliant. Unless progress improves dramatically, a 
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substantial number of mission critical systems will not be compli- 
ant on time. 

In addition to slow progress in fixing systems, many agencies 
were not adequately acting to establish priorities, develop contin- 
gency plans, formulate a more complete and accurate picture of 
year 2000 progress, and ensure that the Government’s critical core 
business processes are adequately tested. First, no govemmentwide 
priorities have been established for fixing systems, based on such 
criteria as the potential for adverse health and safety effects, ad- 
verse financial effects on American citizens, and detrimental effects 
on national security. Furthermore, while individual agencies have 
been identifying mission critical systems, this has not always been 
done based on a determination of the agency’s most critical oper- 
ations. 

For example, as noted by the Defense Science Board, defense has 
no means of distinguishing between the priority of a video confer- 
encing system and the priority of a logistics system, both of which 
were identified as mission critical. If priorities are not clearly set, 
the Government will waste time and resources in fixing systems 
that have little bearing on its most vital operations. 

Second, contingency planning across the Government has been 
inadequate. In their May 1998 quarterly reports to 0MB, only four 
agencies reported that they had drafted contingency plans for their 
core business processes. Without such plans, when unpredicted fail- 
ures occur, agencies will not have well-defined responses and may 
not have enough time to develop and test alternatives. Because 
Federal agencies depend on data provided by their business part- 
ners and services provided by the public infrastructure. For exam- 
ple, voice and data telecommunications, it’s imperative that contin- 
gency plans be developed for all systems supporting critical core 
business processes, regardless of whether these systems are owned 
by the agency. 

Third, OMB’s assessment of the current status of Federal year 
2000 progress is predominantly based on data that is self-reported 
by the agencies. Without independent reviews, 0MB and the Presi- 
dent’s Council on Year 2000 Conversion have little assurance that 
they are receiving accurate information. In fact, some data reported 
to 0MB have been inaccurate. The DOD Inspector General found 
that DOD had no adequate basis for reporting about 320 mission 
critical systems as compliamt in November 1997. In May 1998, the 
Department of Agriculture reported 15 systems as compliant, even 
though these were replacement systems that were still under devel- 
opment or were still in planning. 

Fourth, end-to-end testing responsibilities have not been defined. 
To ensure that the mission critical systems can reliably exchange 
data with other systems and that they are protected from errors 
that can be introduced by external systems, agencies must perform 
end-to-end testing of their critical core business processes. Since 
year 2000 problems affect nearly all digital systems, many systems 
in the end-to-end chain will have been modified or replaced. As a 
result, the scope and complexity of testing and its importance is 
dramatically increased, as is the difficulty of isolating, identifying, 
and correcting problems. So far, lead agencies have not been des- 
ignated to take responsibility for end-to-end testing across organi- 
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zational boundaries and for ensuring the independent verification 
and validation of such testing. 

One of the more alarming problems we have come across is that 
some agencies are not adequately prepared for testing their sys- 
tems for year 2000 compliance. For example, in April 1998, we re- 
ported that the Department of Defense had not specified a uniform 
testing strategy for use by all its components. Further, the Army, 
Navy, and Air Force had not assessed their testing needs or their 
test facility requirements. In May 1998, we reported the Depart- 
ment of A^culture’s Chief Information Officer had not provided 
test guidance to the department’s component agencies and that 8 
of 10 component agencies included in our review had no testing 
strategies. 

To address this problem, we are issuing today another install- 
ment in our year 2000 guidance, which addresses the need to plan 
and conduct year 2000 tests in a structured and disciplined fash- 
ion. The guide describes a step-by-step framework for managing 
and a checklist for assessing all year 2000 testing activities. It in- 
corporates guidance and recommendations of standard bodies and 
draws on the work of leading information technology organizations. 
If effectively implemented, our ^ide should help Federal agencies 
successfully negotiate the complexities involved in the year 2000 
testing. 

Mr. Chairman, this concludes my, statement. I will be happy, of 
course, to answer any questions. 

[The prepared statement of Ms. Stillman follows:] 
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Mr Chairman and Members of the Subcommittee 

Thank you for inviting me to participate in today's hearing on the Year 2000 problem. 

As you know, the federal government is extremely vulnerable to Year 2000 problems due 
to its widespread dependence on computer systems to process financial transactions, 
deliver vital public services, maintain national security, and cany out its operations. This 
challenge is made more difficult by the age and poor documentation of some of the 
government's existing systems and its lackluster track record in modernizing systems to 
deliver expected improvements and meet promised deadlines. Today, 1 will briefly 
discuss the Year 2000 risks facing the government; highlight our major concerns with the 
government's progress in fixing its systems; and introduce our guidance on Year 2000 
testing, which is designed to assist agencies in the most extensive and expensive part of 
remediation. 

RISK OF YEAR 2000 DISRUPTION 
TO GOVERNMENT SERVICES IS HIGH 

Addressing the Year 2000 problem in time will be a tremendous challenge for the federal 
government. Many of the federal government's computer systems were originally 
designed and developed 20 to 25 years ago, are poorly documented, and use a wide 
variety of computer languages, many of which are obsolete. Some applications include 
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thousands, tens of thousands, or even milhons of lines of code, each of which must be 
examined for date-format problems. 

To complicate matters, agencies must also consider the computer systems belonging to 
federal, state, and local governments; the private sector;'foreign countries; and 
international organizations that interface with their systems. For example, agencies that 
administer key federal benefits payment programs, such as the Department of Veterans 
Affairs, exchange data with the Department of Treasury which, in turn, interfaces with 
various financial institutions to ensure that benefits checks are issued. Department of 
Defense systems interface with thousands of systems belonging to foreign military sates 
customers, private contractors, other federal agencies, and international entities such as 
the North Atlantic Treaty Organization. Taxpayers can pay their taxes through data 
exchanges between the taxpayer, financial institutions, the Federal Reserve System, and 
the Department of Treasury's Financial Management Service and the Internal Revenue 
Service. Because of these and thousands of other interdependencies, government systems 
are also vulnerable to failure caused by incorrectly formatted data provided by other 
systems which are noncompliant 

The federal government also depends on the telecommunications infiastructure to deliver 
a wide range of services. For example, the route of an electronic Medicare payment may 
traverse several networks-those operated by the Department of Health and Human 
Services, the Department of the Treasury's computer systems and networks, and the 
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Federal Reserve's Fedwire electronic funds transfer system Seamless connectivity 
among a wide range of networks and carriers is essential nationally and internationally 
and a Year 2000induced telecommunications failure could cause mtgor disruptions. 

In tiddition, the year 2000 could cause problems for the many facilities used by the federal 
government that were built or renovated within the last 20 years and contain embedded 
computer systems to control, monitor, or assist in operations. For example, building 
security systems, elevators, and air conditioning and heating equipment, could 
malfunction or cease to operate. 

Agencies cannot afford to neglect any of these issues. If they do, the impact of Year 2000 
failures could be widespread, costly and potentially disruptive to vital govenunent 
operations worldwide. For example: 

• flights could be grounded or delayed and airline safety could be degraded; 

• the military services could find it extremely difficult to efficiently and effectively 
equip and sustain their forces around the world; 

• Internal Revenue Service tax systems could be unable to process returns, thereby 
jeopatxiizing revenue collection and delaying refunds; 

• the Social Security Administration process to provide benefits to disabled persons 
could be disrupted; and 
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payments to veterans with service-connected disabilities could be erroneous or 
severely delayed. 


KEY YEAR 2000 ISSUES ARE NOT 
BEING ADEQUATELY ADDRESSED 


Because of the urgent nature of the Year 2000 problem and the potentially devastating 
impact it can have on critical government operations, we designated the problem as a 
high-risk area for the federal government in February 1997.' Since that time, we have 
issued over 40 reports and testimony statements detailing specific findings and 
recommendations related to the Year 2000 readiness of a wide range of federal agencies.^ 
We have also issued guidance to help organizations successfully address the issue.® 


Overall, the government's 24 mryor departments and agencies are making slow progress in 
fixing their systems. In May 1997, the Office of Management and Budget (0MB) reported 
that about 21 percent of the mission-criticai systems (1,698 of 7,649) for these 


‘ High-Risk Series: Information Management and Technology (GAO/HR-97-9, February 
1997). 

list of publications is included as an attachment to this statement 

"Year 2000 Computing Crisis: An Assessment Guide (GAO/AlMD-10.1.14, September 1997), 
which includes the key tasks needed to complete each phase of a Year 2000 program 
(awareness, assessment, renovation, validation, and implementation); and Year 2000 
Computing Crisis: Business Continuitv and Contingency Planning (GAO/AlMD-10.1.19, 
Exposure Draft, March 1998) which describes the tasks needed to ensure the continuity 
of agency operations. 
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departments and agencies were Year 2000 compliant * A year later, m May 1998, these 
departments and agencies reported that 2,914 of the 7,336 mission-critica] systems in their 
current inventories, or about 40 percent, were compliant Unless progress improves 
drtunatically, a substantial number of mission-critical systems will not be compliant on 
time. 

In addition to slow progress in fixing systems, many agencies were not adequately acting 
on critical steps to establish priorities, solidify data exchange agreements, and develop 
contingency plans. Likewise, more attention needs to be devoted to (1) ensuring the 
government has a complete and accurate picture of Year 2000 progress, (2) setting 
national priorities, (3) ensuring that the government's critical core business processes are 
adequately tested, (4) recruiting and retaining information technology personnel with the 
appropriate skills for Year 2000-related work, and (5) assessing the nation's Year 2000 
risks, including those posed by key economic sectors. 1 would like to highlight some of 
these vulnerabilities and our recommendations made in April 1998 for addressing them.‘ 


‘The Social Security Administration's (SSA) mission-critical systems were not included in 
these totals because SSA did not report in May 1997 on a system basis. Rather, SSA 
reported at that time, and again in August 1997, on portions of systems that were 
compliant For example, SSA reported on the status of 20,000-plus modules rather than 
200-plus systems. 

‘Year 2000 Computing Crisis: Potential for Widesi rread Disruption Calls for .Strong 
Leadership and Partnerahins (GAO/AIMD-98-86, April 30, 1998). 
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First, govenunentwide priorities in fixing systems have yet to be established There 
has not been a conceited effort to set govemmentwide priorities based on such 
criteria as the potential for adverse health and safety effects, adverse financial 
effects on American citizens, detrimental effects on national security, and adverse 
economic consequences. Furthermore, while individual agencies have been 
identifying mission-critical systems, this has not always been done based on a 
determination of the agency's most critical operations. For example, as noted by 
the Defense Science Board, Defense has no means of distinguishing between the 
priority of a video conferencing system and a logistics system, both of which were 
identified as mission-critical. If priorities are not clearly set, the government may 
well end up wasting limited time and resources in fixing systems that have little 
bearing on the most vital government operations. 

Second, contingency planning across the government has been inadequate. In their 
May 1998 quarterly reports to 0MB, only four agencies reported that they had 
drafted contingency plans for their core business processes. ’ATithout such plans, 
when unpredicted failures occur, agencies will not have well-defined responses and 
may not have enough time to develop and test alternatives. Federal agencies 
depend on data provided by their business partners as well as services provided by 
the public infiastructure (e.g., power, water, transportation, and voice and data 
telecommunications). One weak link anywhere in the chain of criticai 
dependencies can cause mqjor disruptions to business operations. Given these 
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interdependencies, it is imperative that contmgency plans be developed for all 
critical core business processes and supporting systems, regardless of whether 
these systems are owned by the agency. 

• Third, OMB's assessment of the current status of federal Year 2000 progress is 
predominantly based on agency reports that have not been consistently reviewed 
or verified. Without independent reviews, 0MB and the President's Council on 
Year 2000 Conversion have little assurance that they are receiving accurate 
information. In fact, we have found cases in which agencies' systems compliance 
status reported to OMB has been inaccurate. For example, the DOD Inspector 
General estimated that almost three quarters of DOD's mission-critical systems 
reported as compliant in November 1997 had not been certified as compliant by 
DOD components.® In May 1998, the Department of Agriculture reported 15 
systems as compliant, even though these were replacement systems that were still 
under development or were platmed to be developed,’ (The department plans to 
remove these systems fiom compliant status in its next quarterly report.) 

• Fourth, end-to-end testing responsibilities have not yet been defined. To ensure 
that their mission-critical systems can reliably exchange data with other systems 

® Yeai 2000 Certification of Mission-Critical DOD Information Technology Systems (DOD 

Office of the Inspector General, Report No. 98-147, June 5, 1998). 

’ Year 2000 Computing O risLs: IlSD A Faces lYemendous Challenges in Ensuring That Vital 

Public Services Are Not Disrupted (GA07r-AIMD-98-167, May 14, 1998). 
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and that they are protected from errors that can be mtroduced by external 
systems, agencies must perform end-to-end testing for their critical core business 
processes. The purpose of end-to-end testing is to verily that a defined set of 
interrelated systems, which collectively support an orgaitizational core business 
area or function, work as intended in an operational environment. In the case of 
the year 2000, many systems in the end-to-end chain will have been modified or 
replaced. As a result, the scope and complexity of testing-and its importance-is 
dramatically increased, as is the difficulty of isolating, identi^ing, and correcting 
problems. Consequently, agencies must work early and continuously with their 
data exchange partners to plan and execute effective end-to-end tests. So far, lead 
agencies have not been designated to take responsibility for ensuring that end-to- 
end testing of processes and supporting systems is performed across boundaries, 
and that independent verification and validation of such testing is eitsured. 

In our April 1998 report on govemmentwide Year 2000 progress, we made a number of 
recommendations to the Chairman of the President's Council on Year 2000 Conversion 
aimed at addressing these problems. These included: 

• establishing govertunentwide priorities and ensuring that agencies set their own 
agencywide priorities; 

• developing a comprehensive picture of the nation's Year 2000 readiness; 
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• requinng agencies to develop contingency plans for all critical core business 
processes; 

• requiring agencies to develop an independent verification strategy to involve 
inspector general or other independent organizations in reviewing Year 2000 
progress; and 

• designating lead agencies responsible for ensuring end-to-end operational testing of 
processes and supporting systems is performed. 

We are encouraged by actions the Council is taking in response to some of our 
recommendations. For example, 0MB and the CIO Council adopted our draft guide 
providing information on business continuily and contingency planning issues common to 
most targe enterprises as a model for federal agencies.* However, as we recently testified 
before this Subcommittee, some actions have not been initiated-principally with respect 
to setting national priorities, independent verification, and end-to-end testing. 

GAO GUTOANCE ON YEAR 2000 TESTING 

One of the more alarming problems we have come across in our Year 2000 reviews is that 
some agencies are not adequately prepared for testing their systems for Year 2000 
compliance. For example, in April 1998, we reported that the Department of Defense did 
not have a testing strategy that specifies uniform criteria and processes which its 

“GAO/AIMD-10.1.19, Elxposure Draft, March 1998. 
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components should use m testing theur systems The Army, Navy, and Air Force had not 
assessed their test needs or test facility requirements.® In May 1998, we reported that the 
Department of Agriculture's Chief Information Officer had not provided test guidance to 
the department's component agencies, and 8 of 10 component agencies included in our 
review lacked testing strategies.'® 

The fact that these agencies are not prepared now for effective testing raises serious 
concern. Complete and thorough Year 2000 testing is essential to provide reasonable 
assurance that new or modified systems process dates correctly and will not jeopardize 
an organization's ability to perform core business operations after the millennium. 
Moreover, since the Year 2000 computing problem is so pervasive, potentially affecting an 
organization's systems software, ^plications software, databases, hardware, firmware and 
embedded processors, telecommunications, and external interfaces, the requisite testing is 
extensive and expensive. Leading organizations estimate that testing will require at least 
50 percent of an entity's total Year 2000 program time. 

To address this problem, we are issuing today a new irutallment of our Year 2000 
guidance which addresses the need to plan and conduct Year 2000 tests in a structured 


^Defense Computers: Year 2000 Computer Problems Threaten POD Operations 
(GAO/AIMD-98-72, April 30, 1998). 

‘°GAO/T-AIMD-98-167, May 14, 1998. 
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and disciplmed fashion " The guide descnbes a step-by-step framework for managing, 
and a checklist for assessing, all Year 2000 testing activities, including those activities 
associated with computer systems or system components (such as embedded processors) 
that are vendor supported. This disciplined approach and the prescribed levels of testing 
activities are hallmarks of mature software and system development/acquisition and 
maintenance processes. 

The guide describes the five levels of Year 2000 testing activities. The first level 
establishes the organization infrastructure key processes needed to guide, support, and 
manage the next four levels of testing activities. For example, it addresses defining and 
assigning Year 2000 test management authority and responsibility, defining criteria for 
certifying a system as compliant, identifying and allocating resources, establishing 
schedules, and securing test facilities. The next four levels provide key processes for 
effectively designing, conducting, and reporting on tests of incrementally larger system 
components: software unit/module tests, software integration tests, system acceptance 
tests, and end-to-end tests. The processes focus on testing of software and system 
components that the organization is directly responsible for developing, acquiring, or 
maintaining Key processes, however, are also defined to address organizational 
responsibilities relative to testiiig of vendor-supported and commercial, off-the-shelf 


“ Year 2000 Computing Ct iaia: A Testing Guide (GACVAlMD-10.1.21, Exposure Draft, June 
1998). 


11 



29 


(COTS) products and components (mcluding hardware, systems software, embedded 
processors, telecommunications and COTS applications). 

The test model builds upon and complements the five-phase conversion model described 
in our Year 2000 readiness guide. The five levels of test'activities span all phases of our 
Year 2000 conversion model, with the preponderance of test activities occurring in the 
conversion model's renovation and validation phases. 

Finally, the guide incorporates guidance and recommendations of standards bodies, such 
as the National Institute of Standards and Technology and the Institute of Electrical and 
Electronic Engineers on Year 2000 testiirg practices and draws on the work of leading 
information technology organizations including the Software Engineering Institute, 
Software Quality Engineering, Software Productivity Consortium, and the United 
Kingdom's Central Computer and Telecommimications Agency. 


In conclusion, if effectively implemented, our guide should help federal agencies 
successfully negotiate the complexities involved with the Year 2000 testing process. 
However, the success of the goverrunent's Year 2000 remediation efforts ultimately hinges 
on setting govemmentwide priorities, ensuring that agencies set priorities and develop 
contirrgency plans consistent with these priorities, developing an accurate picture of 
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remediation progress, designatmg lead agencies for end-to-end testmg efforts, and 
addressing other critical issues such ^ recruiting and retaining qualified information 
technology persotmel. 

Mr. Chairman, this concludes my statement Mr. Joel Willemssen, GAO's Issue Area 
Director for Civil Agencies Information Systems and our focal point for Yeru' 2000 work, 
has accompanied me today. We will be happy to answer any questions you or Members 
of the Subcommittee may have. 
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UST OF GAO PRODUCTS THAT 
ADDRESS THE YEAR 2000 PROBLEM 


Year 2000 Computing Crisis: TeLecominunicaaons Readiness Critical. Yet Overall Status 
l.argelv Unknown (GAO/T-AIMD-98-212, June 16, 1998) 

GAO Views on Year 2000 Testing Metrics (GAO/AIMD-98-217R, June 16, 1998) 

IRS' Year 2000 Efforts: Business C ontinuitv Planning Needed for Potential Year 2000 
System Failures (GAO/GGD-98-138, June 15, 1998) 

Year 2000 Computing Crisis: Actions Must Be Taken Now To Address Slow Pace of 
Federal Progress (GAO/T-AIMD-98-205, June 10, 1998) 

Defense Computers: Army Needs to Greatly Strengthen Its Year 2000 Program 
(GAO/AIMD-98-53, May 29, 1998) 

Year 2000 Computing Crisis: USDA Faces Tremendous Challenges in Ensuring That Vital 
I^iblic Services Are Not Disrupted (GAO/T-AIMD-98-167, May 14, 1998) 

Securities Pricing: Actions Needed for Conversion to Decimals (GAO/T-GGD-98-121, May 
8, 1998) 

Year 2000 C omniidng Crisisr Gnnti nuing Risks of Disruptio n tn .Social . Security. Medicare, 
and Treasury Programs (GAO/T-AIMD-98-161, May 7, 1998) 

IRS' Year 2000 Efforts: Status and Risks (GAO/T-GGD-98-123, May 7, 1998) 

Air Traffic Control: FAA Plans to Replace Its Host Computer System Because Future 
Availability Cannot Be Assured (GAO/AIMD-98-138R, May 1, 1998) 

Year 2000 Computing Crisis: Potential For Widespread Disn mtinn Gall s For Strong 
Leadership and Partnerships (GAO/AIMD-98-86, April 30, 1998) 

PefetLse Computers: Year 2000 Computer Problems Threaten POD Opeiations 
(GAO/AIMD-98-72, April 30, 1998) 

Department of the Interior Year 2000 Computing Crisis Presents Risk of Disruption to 
Key Operations (GAO/T-AIMD-98-149, April 22, 1998) 

Year 2000 Computing Crisis: Business Continuitv and Contiitgencv Planning (GAO/AIMD- 
10.1.19, Exposure Draft, March 1998) 


14 




32 


Tax AdnumstratLon. IRS' Fiscal Year 1999 Bud get Request and Fiscal Year 1998 Filing 
Season (GAO/T-GGD/AIMD-98-U4, March 31, 1998) 

YeangQOO Computing Crisis: Strong Leadership Needed to Avoi d Disruption of Essential 
Services (GACVT-AIMD^ll?, March 24, 1998) 

Year 2000 Computing Crisis: Federal Reyilatorv Efforts to Ensure Financial Institution 
Systems Are Year 2000 Compliant (GAO/T-AIMD-98-116, March 24, 1998) 

Year 2000 Computing Crisis: Office of Thrift Supervision's Efforts to Ensure Thrift 
Systems Are Year 2000 Compliant (GAO/T-AIMD-98-102, March 18, 1998) 

Year 2000 Computing CrisLs: Strong Leadership and Effective Puhli c/Private Cooperation 
Needed to Avoid Major Disruntiona (GA(Vr-AIMD-98-101, March 18, 1998) 

Post-Hearing Questions on the Federal Deposit Insurance Corporation's Year 2000 fY210 
Preparedness (AIMD-98-108R, March 18, 1998) 

SEC Year 2000 Report: Future Reports Coul d Provide More Detailed Information 
(GAO/GGD/AIMD-98-61, March 6, 1998) 

Year.2QOO Readiness: NRC's Proposed Appr oach Regarding Nuclear Powerplants 
(GAO/AIMD-98-90R, March 6, 1998) 

Year 2000 Computing Crisis: F ederal Deposit Insurance Corporation's Efforts to Ensure 
Bank Systems Are Year 2000 Compliant (GAO/T-AIMD-98-73, February 10, 1998) 

Year 2000 Computing Crisis: FAA Must Act Quic kly to Prevent Systems Failures (GAO/T- 
AIMD-98-63, February 4, 1998) 

FAA Computer Systems: Ltolted Progress on Year 2000 Issue Increases Risk 
Dramaticallv (GAO/A1MD-98-4S, January 30, 1998) 

Defense Computers: Ai r Force Needs to Strengthen Year 2000 Oversight (GAO/AIMD-98- 
35, January 16, 1998) 

Year 2000 Computing Crisis: Actions Needed to Addres s Credit Union Systems' Year 2000 
Problem (GAO/AIMD-98-48, January 7, 1998) 

Veterans Health Administration Facility Systems: S ome Progress Made In Ensuring Year 
2000 Compliance. But Challenges Remain (GAO/A1MD-98-31R, November 7, 1997) 

Year 2000 CninpiiHny Grisis- National Credi t Union Administration’ s Efforts to Ensure 
Credit Unio n Systems Are Year 2000 Compliant (GAQ/T-AIMI)-98-20, October 22, 1997) 
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Social Secuntv Admimstiation. Significant Progress Made m Year 2000 Effort. But Key 
Risks Remain (GACVAIMD-98-6, October 22, 1997) 

Defense Computers: Technical Support Is Key to Naval Supply Year 2000 Success 
(GAO/AIMD-9S-7R, October 21, 1997) 

Defense Computers: LSSC Needs to Confront Significant Year 2000 Issues 
(GAO/AIMD-97-149, September 26, 1997) 

Veterans Affairs Computer Systems: Action Underway Yet Much Work Remains To 
Resolve Year 2000 Crisis (GAO/T-AIMD-97-174, September 25, 1997) 

Year 2000 Comoutini! Crisis: Success Depends Upon Strong Management and Structured 
Annroach . (GAO/T-AIMD-97-173, September 25, 1997) 

Year 2000 Computing Crisis: An Assessment Guide (GAO/AIMD-10.1.14, September 1997) 

Defense Gomniiters: SSG Needs to Sustain Year 2000 Progress (GAO/AIMD-97-120R, 
August 19, 1997) 

Defense Gomniiters. Tmnrnvements to POD Systems Inventory Neeried for Year 2000 
Effort (GAO/AIMD-97-112, August 13, 1997) 

Defense Gomniiters: Issues Confronting DIA in Addressing Year 2000 Problems 
(GAO/AIMD-97-106, August 12, 1997) 

Defense Computers: DFAS Faces Challenges in Solving the Year 2000 Problem 
(GAO/AIMD-97-117, August 11, 1997) 

Year 2000 Computing Crisis: Time is Running Out for Federal Agencies to Prepare for the 
New Millennium (GAO/T-AIMD-97-129, July 10, 1997) 

Veterans Benefits Computer Systems: Unintemipted Delivery of Benefi ts Depends on 
Timely Correction of Year-2000 Problems (GAO/T-AIMD-97-1 14, June 26, 1997) 

Veterans Benefits Computer System s: Risks of VBA's Ye ar-2000 Efforts (GAO/AlMD-97-79, 
May 30, 1997) 

Medicare Transaction System: Success Depends Upon Correcting Critical Managerial and 
Technical Weaknesses (GAO/AIMD-97-78, May 16, 1997) 

Medicare Transaction System: Serious Managerial and Technical Weaknesses Threaten 
MndemiTation (GAO/T-AIMD-97-91, May 16, 1997) 
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Year 2000 Computing Crisis. Risk of Senous Disn inUnn tn F-wnhal Rovpmmont 
Functions Tails for Agency Action Now (GAO/T-AIMD-97-62, February 27, 1997) 

Year 2000 Co mputing Crisis: Strorui Leadership Today Needed To Prevent Future 
Disruption of Government Servicea (GAO/T-AIMD-97-51, February 24 , 1997) 

High-Risk S eries: Information Management and Technology (GAO/HR-97-9, February 
1997) 


(511463) 



35 


Mr. Horn. Well, we thank you very much, Dr. Stillman. You are 
always very helpful. 

Our next spe^er and presenter is Mr. Dennis Grabow, the presi- 
dent of the Millennium Corp. 

Mr. Grabow. 

STATEMENT OF DENNIS GRABOW, PRESIDENT, MILLENNIUM 

CORP. 

Mr. Grabow. Good afternoon, Mr. Chairman. Thank you for in- 
viting me to come before you today. 

As the financial person on this panel, we bring a sense of realism 
because we look at the year 2000 from an economic issue, we look 
at it as a wealth transfer issue. All of our research that we have 
gone through during these past couple of years indicates how there 
are so many details involved in year 2000, and they are very im- 
portant. 

However, we need to step back and become a realist and look at 
the process that we are going through. To reach compliance is a 
very difficult thing and it’s important to understand the technology. 
The technology is the answer to how we will actually achieve suc- 
cess. I find that the ultimate goal is to be compliant. That is going 
to create wealth for our country, for our communities, for corpora- 
tions and for individuals, and, therefore, we believe that the ability 
to have a compliant strategy is important in terms of under- 
standing this issue. We believe that a new investment model, a 
new way of looking at this issue is required. Oftentimes we get 
buried in the many details that get discussed. 

As we step back and examine this issue, we came to the conclu- 
sion in December 1997 that we were forecasting an economic reces- 
sion, a global economic recession, and it is not exciting to talk 
about that. I would like to say that I am an optimist, a supreme 
optimist, but I am also a realist. As a person dealing with people’s 
finances, we are entrusted with the fiduciary duty of their wealth. 
So, therefore, it’s important to come to this conclusion and look at 
it in a realistic manner. 

We come to the fact that we will have a recession from two key 
ingredients. One, unfortunately, is the public sector, and I would 
like to at this moment thank you and your committee for the im- 
portant work that you have done. It is very critical in the analysis 
in coming to some of our conclusions. Unfortunately, I think it’s 
time that we have to recognize that the U.S. Federal Government 
is going to suffer some impairment because all this work cannot be 
done in time. As you point out in your many reports, we are talking 
about many of the mission critical systems not being completed, 
lest we not forget, probably two-thirds of all the other systems that 
are going on within these various departments add value as well. 

In our economic analysis. Government does have value. In to- 
day’s world, the U.S. Government accounts for approximately 19 
percent of GDP. If you drill down into adding the Federal, State, 
and local public sectors, we are over one-third of our U.S. economy. 
Unfortunately, when you look at these other public bodies, their 
work toward remediation is not as successful as we would like to 
see it. 
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If you then look broadly across the world and recognize that our 
Government is the only one that can produce the type of report 
that you have done so well in preparing, it leads an investor to 
come to some conclusions about what is taking place with other 
Federal Governments around the world, and that brings us to our 
next concern, which leads us into foreign trade. There has not been 
much analysis. 

We issued a white paper recently called ships, chips, and slips, 
where we detail sill the technology activities that are dependent on 
foreign trade, both mission critic^, nonmission critical, and embed- 
ded systems. Technology supports the international trade trans- 
action. If you look at an average trade transaction, there is any- 
where between 10 and 12 different organizations, from the pur- 
chaser to the seller, a couple of banks, a couple of port authorities, 
maybe five transportation companies, including ships, and I might 
add, we have studied ships at ^eat length and they do have con- 
cerns on the embedded system sides and have to be checked. There 
are also finance companies, warehousing. Altogether, these 10 or 
12 organizations all communicate through the method of various 
technology platforms. The other part of a foreign trade transaction, 
which is so critical, is there is 10 to 12 sequential steps. The flow 
of paper and the flow of goods have to occur in time. They can’t 
be out of order or the process breaks down. 

So as investors, and as people that are knowledgeable in under- 
standing the process of remediation and understanding the process 
of these technologies, we come to the conclusion that foreign trade, 
unfortunately, is going to decline very rapidly and very quickly as 
we move into next year. This is going to affect many areas of the 
Government and the private sector. For example, agriculture will 
be very important and there will be a significant impact there, as 
well as many other areas. 

The things that concern us, as we look ahead, is basically the 
lack of understanding. We think it’s important and we applaud 
what was recently said here by the GAO, in terms of coming to a 
definition and a guideline, we think that that is very important. 

I would second your comments that you made just a few mo- 
ments ago, that the administration must come to weekly reporting. 
We don’t have time. I strongly would recommend, we don’t have 
time to wait for monthly reports. We see this in industry. I co- 
chaired a convention in New York of a bunch of investors and there 
was a gentleman from Kraft Foods that was there, and they are 
using weekly reports to monitor their progress and to try to ascer- 
tain emy slippage. I might add that he said that he was a very 
knowledgeable manufacturing executive and he knew about the 
year 2000 in 1980. He tried to work around it, Mr. Chairman, and 
he couldn’t. It’s a very difficult issue on the manufacturing floor, 
and we believe that the ultimate economic impact to our Nation 
and around the world is going to be felt through the embedded sys- 
tem area. 

We talk to many people in almost all industries of our economy 
and walk away with a very clear picture. And what in our view is 
misunderstood is the importance of compliance, and what we are 
suggesting is we need a national debate to begin today, throughout 
the country, on the area of compliance and its importance. I would 
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liken it to when President Kennedy challenged the Nation to put 
a man on the moon. This is equally as important and equally de- 
serves the attention of our country. 

That concludes my remarks, Mr. Chairman. I would be happy to 
emswer any questions. 

[The prepared statement of Mr. Grabow follows:] 
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Testunoay ofD^B^G Grabow ) 

Chief Execulive"Dffie«t— 

The MiUennium Investment Officer 
Before ifae 

SUBCOMMITTEE ON GOVERNML NT MANAGEMENT, INFORMAT? ON, AND TECHNOLOGY, 
COMMITTEE ON GOVERNMENT REFORM AND OVERSIGHT 

June 22. 1998 


Mr. Chai rman and Members of the Committee: 

Through the exceptional work of this Committee, others in the Congress, determined organizations and 
individuals, the sctqie and potential inqiact of Year 2000 is becoming more apparent This is clearly a 
tremendous technological challenge of uiqirecedented scope and we believe that your diligent work on this 
issue is of tremendous in^rtance to our country and our economy. 

At The Millennium Investment Corporattoa, we focus on the global financial implications of the Year 
2000. From a financial perspective, Year 2000 is a worldwide challenge with tremendous economic 
in^lications. Technology is a fundamental driver in our ^ility to achieve efficiencies and increase 
productivity and conqiete globally. Worldwide, disruptions in technology will slow production, and the 
delivery of services and information. 

In December 1997 we predicted a worldwide recessimi based on the impact of Year 2000. Nothing in our 
c<mttnuing woric causes us to rethink our views. If anything today we are further behind in die remediation 
and tm plgmg ntarion process than we would have expected at the end of last year when we made our initial 
fmecasL The work in embedded systems is still lagging especially in small and medium sized 



Year 2000 is a so s^nificant because so much of our economy is linked to technology. From electronic 
financial transactions, to flow controls in a fMtory, to the heating system in a high-riw office building, 
technology drives die system. It is a patchwork of technologies that is now rou^y 40 years old, and in 
serious ne<^ of attention. 

However, rather dian being able to upgrade our systems over time, Year 2000 is forcing us to compress the 
process. Hiis process will be no dou^ painful but die long-term affects will be very positive. In solving the 
Year 2000 problem we will have, coU^vely, i^gzaded our technology infiastructure and prepared 
ourselves for a period of growdi ~ growth driven by efficiencies in production, the delivery of services, 

a lift ♦wla mnwminir.atinna 

If you conqwre Year 2000 compliance widi odwr initiMives, such as converting our lead-gasoline based 
systems to on unleaded systems, or converting our wire-based telecommunicatimis infrastiucture to a fiber 
critic based system, you can begin to see how older technologies simply need to be updated to meet current 
lueds. The diffinence widi Year 2000 is diat we do not have the luxury of time to phase in a 
compliance strategy. It has to happen now. And the result of non-action will be harsh 

We are especially concerned about four Year 2000 factors. First we do not have the resources to complete 
the reprogramming, replacements and repairs required in the timeframe available; second, technology 
failures can have a r^le effect in die economy; diini, government: and four, international trade, whkh 
impacts such a large sector of the economy, will be adversely affected by Year 2000. 

Specifically, in international trade we have a high level of interdependency. International trade is built 
upon a global network of interdependent relationships and interdependent technology. Inherent in every 
transaction are three levels of risk: Internal risk is present in all die systems and processes widiin an 
mganization required in an iapmt/txport transaction. External risk should be considered in die systems 
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and suppliers required throughout the transacaon This can involve several companies, government 
agencies, and all the technology involved in manufactuncg, shipping, port authorities, msurance, fmancial 
transactions, storage, and inspections. Infrastructure risk is found in transportation systems, power, water, 
and all other services that allow companies and municipalities to conduct business. 

Every import and export transaction involves a number of sequential steps and several companies, 
including transportation companies, ports, freight forwanters, banks, and warehouses as well as 
government agencies. All these entities rely on information technology systems and embedded systems, 
which may or may not be in compliance for the miUennium date change. We simply do not believe this 
system will function properly. Fiulher con^licating this transaction is the inability to actually test the 
systems until January 1, 2000, due to the virtual endless combinations of technologies and enterprises 
comprising a foreign trade transaction. 

As we move to a Year 2000 conqiUant economy, we believe some countries, companies and individuals 
will thrive while others will struggle and be left behind. Tliose that have prepared for Year 2000 will be in 
a far better position to conqiete and move forward. Therefore, as an economic factor, we believe that Year 
2000 is the single most inqxirtant wealth transfer event of this century. 

The same dynamics were present in the economy in the early 70s when early adopters of technology and 
computing became dominant players in their market. The key difference is that Year 2000 is not simply an 
opportunity to get ahead - it is an imperative to ensuring the that our economy is not crippled by 
shutdowns, slowdowns and system failures that are currently being registered and could continue into the 
21st century. 

We also recognize that Year 2000 has inq)licatioas well beyond the financial and the strategic. Technology 
also is in our lives at die most basic level and we expect to see individuals and families affected by failures 
in the electronic equipment they depend upon. We are especially concerned about public infrastructure and 
disruptions in the delivery of essential services. 

Compliance is the Goal 

The level of disruption and die shifr in wealth is based on one simply principle: Year 2000 compliance. 
Compliance is not an option. Coizq)liance is essential, and complimce must extend to infonnation 
processing and embedded systems. Currently, we see con^ianies focusing on their mission critical 
information processing capabilities and largely ignoring die in^Mct of embedded systems. 

The great economic benefits obtained from technology are derived from properly working systems. Right 
now we know these systems can not all function smoothly into the next t^enniuia For example in the 
case of the Federal government, by its own self-analysis, it is impossible to achieve compliance over the 
remaining months. Therefore it is time to begin planning to mitigate the ineviuible disruptions. 

I realize that this committee is focusing on rec o mm endations and solutions and 1 believe that risk 
management is a critical part of the solution. Risk is inherent in any electronic equipment and in every 
business process that interacts with an electronic system. This is a long-term issue and we see an 
inadequate understanding of the risk because most people aa.<iiTni» everydiing will be fixed and working 
properly (over die next 18 months). Our research indicates this is a faulty assumption with significant 
economic consequences. 

Year 2000 a Misnomer 

At this point let me clarify why we need action now. The name, Year 2000, is a misnomer. People seem 
to lock in their minds that on midnight of December 31,1999 we will see the bite of ‘‘the bug." No 
question this will begin the period of significant system failures. However, the reality is system failures 
have been occurring already and they will increase significantly as this year ends. 

In particular on January 1, 1999, our research indicates, the rate of failures in infonnation systems 
(management reports and financial statements) will begin to be visible to many organizations have not 
completed their remediation. Further for technical reasons we anticipate failures also to start showing iq) 
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on January 1 , 1 999 m production facilities as welt Those companies utilizing just-in-time mventory 
methods may begin to expenence disruptions from the flow of goods in the economy We have been 
lulling ourselves into a false sense of deadlines, believing we still have time. 

Economic Forecast 

Our forecast is predicated upon the tack of resources available and the slow pace to compliance primarily 
in production equipment. Embedded system remediation is more complicate with longer lead times, 
compared to fixing information processing systems. 

Further, we see that our federal government is behind schedule in meeting its compliance goals. This will 
begin to erode the ability of services to be delivered and restrict government spending on projects — which 
is a key economic driver. 

Overall, 1999 will be a difficult year in the economy, as system failures begin te occur both in information 
processing and in production facilities. This will have die resulting affect unfortunately of gradually 
increasing the uneixq)loyment rate throughout the year. 

By our research, state and local governments are also behind schedule and may also see service and 
p^ormance loses. We also note the increasing intensity of concern regarding Year 2000 by governmental 
agencies with regulatery responsibility. At some point, these agencies will be forced to take action against 
companies to protect the public interest and control the scope of problems created by non-compUant 
systems. 

Over the next several months, as system failures intensify, companies will singly pull back, retrench and 
moderate their internal and external expansion plans to protect their operatioDs. We also predict that some 
con:q)anies who can not or will not reach compliance will choose or may be forced into bankniptcy as a 
strategy. 

Recent mergers and acquisitions may prove to be an albatross to those acquiring companies as they learn 
they have acquired even more Year 2000 work, thus increasing risk to their capital structures. Our research 
indicates many transactions currently being con^)ieted in the marketplace do not adequately take into 
account Year 2000 due diligence. Further in disclosures in public documents, based upon our knowledge 
of Year 2000 remediatioa issues, companies do not appear to be fully disclosing their risks. This in our 
view is largely due to their uncertainty of what really is Year 2000. 

Further as banks and finance companies move further into the financial implications of this issue we 
believe credit rationing and ultimately a credit crunch will occur. Just like in the early 1980's these lending 
institutions will find a safe harbor in purchasing government bonds rather than lending to other institutions. 

Therefore, financing of die remediation process will take on a significant determinant of ultimate success to 
conqiUance. Again, from a financial p e r spective, we see this process as a necessary means to create a more 
fundiunentally sound technology infrastructure. 

Three factors in our wealth transfer analysis that affect all companies are: public infrastructure, 
interaational trade and government We are particularly concerned about these areas because all are in 
serious trouble today, in respect to Year 2000 and there is a void in leadership in manag in g these areas. 

As we have learned from recent disruptions in our phone system, when a single satellite failed to operate, it 
created tremendous disruptions in paging, cellular and oth^ telecommunications. When a company shuts 
down, from a strike, weather conditions or other reasons, it can send a r^le affect throughout the 
economy. If we see disruptions in airline travel, in electrical service, parcel delivery, telecommunications 
or other essential services, our economy will be affected. 

Year 2000 Definition 

The first step in addressing compliance is to have a consistent definition of the problem. Year 2000 is an 
issue that involves five areas. You cannot inquire about only one area of compliance and expect to 
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evahiAte an entopnae for total Year 2000 compliance For example, this is not just a nuunframe issue 
The awareneu may have staited years ago m ^t area, however, preparatioa, contingency planning and die 
resulting economic consequences will be feh from five distinct areas. 

Our model for Year 2000 investment analysis encompasses reviewing government, business and 
production fwilitiea for: 

Technology risk tutors 

1 . Information processing - mainframes, client servo', personal computers, etc. 

2. Embedded systems - mi cr op r o ce ssors, programmable logic contioUers, etc. 

Enterprise dependencies reliant upon information processing and embedded systems 

3. Ri^le efifcct - the vender tnd customer chains 

4. Infrastructure - electricity, water, telecommunications, tran^ortation 

5. Government - federal, state, and local 

Together all these areas have a cumulative ingnct on die operations of an enterprise whether a corporation 
or government agency, and have to be examii^ for Year 2000 consequences. 

Managing Expectations 

Sometimes diis huge project mansgement task can seem intimidating. Everyone I know who is involved in 
the details of the issue has a very healthy respect for die task. It should not be underestimated, but it should 
not be feared either. 

There will be disnqitions. Some will create minor nuisances. Others will be far more serious. My point is 
that Year 2000 is s national issue, widi fri reaching economic consequences and we need to addiw this 
frmn a national level. 

Like any other challenge we have faced in our country, the American Spirit is ready to rise to the occasion. 
Tfarot^bout our history as a Nation, our citizens have proven they can respond to goals. 

What we do need is focused national leaderah^ to lead us one more time to the future we are all seeking 
together. We cannot hide from die eventual outcome. The American people and odiers irDund the world 
need to be pr ep ar ed and educated to die possible outcomes. What we don’t like are surprises. 

Aldiough this Committee, as well ss odier leaden in die Congress, government agencies and others have 
been working diligendy to bring this issue into focus for the American people, we need to engage everyone 
in die process. 

How difficult the transition will be and the final outeome will be dependent upon the will of our political 
and business leadenh^ to respond to die Year 2000 challenge. 


Plan of Action 

The question we are being asked is what are die solutions, what can we do now to prevent or reduce die 
inqMct of Year 2000? We have a number of recommendations. 

First, we need to adr^ and disseminate the real definition of Year 2000 as discussed earlier. To most 
people. Year 2000 is a computing problem dial affects information processing. That is really only about 
20% of the picture. To find and repair fruity chips is hr more expensive than repro gr amming a computer. 
So we must develop an understanding of Year 2000 that accurately defines the problem. 

Our second recommendation is to define s process by which individuals, companies and government 
agencies can reach cmnplianee, reduce their risk and consider contingency planning. Our definition of this 
procesa involves these steps: an inveototy of systems, analysis of the condition, developing a compliance 
strategy that focuses on mission critical systems first, but addresses all systems, testing systems to 
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detennine what needs woik, implementing fixes and then retestu^ equipmenL Testii^ is» by our estimates, 
about 50 percent of the comnutment and most of the situations we track do not provide ade^te time or 
resources for testing. 

Our third r e c o mm endation is to provide intensive leadership at all levels of our society. We need all of our 
govonment and industry leaders to come forward with an accurate inofile of what we are focing as a 
nation and what we are going to do to solve it Cuimtly we see companies hesitant to come fotward for 
fear of legal action or they do not want to indicate that they project "disruptions" fiom Year 2000 
problems. But the aim of leadership should be cooptation and guidance, not intimidation and regulation. 

In January, 1998, 80 buainett leaders and academics stit a letter to the Prime Ministers of die 

United Kingdom and President Ginton eiqiressing their “astute concon" over the lack of action over the 
“MiUeonhim conqnitt crisis*’. The letter, signed by metnben of tbe British North- American Committee, 
urges leaders to “deal with the Millennium bug as a top priority in the brief time that remams." 

A fourth recommendatioa is to develop a "national compliance strategy” that places compliance as our 
Nation’s number one goaL The Nation must tilM on a national debate of the importance and seriousness of 
achieving compliance. Alfoough we will not get titere in time, it will focus attention on conqiliance and 
create the necessary fiamework for risk management and contingency planning. 

I feet this effort is consistent adth die oatimisl initiative in the 1960s to put a man on the moon. At that 
time. President Keimedy articulated the national imperative to be first in this effort and Year 2000 is 
equally or even mor e inqiortant This is an issue that will define our ability to compete in the years ahead, 
and to ctmtinue to lead ^ industrialized world in an information-age economy. 

In otiia wealtii transfer events of the last 25 years, such as globalization, the Internet, and the growth of 
conqmting, market forcei largely controlled shifis in wealth. Technology has been a tremendous economic 
force worldwide and the U.S. government has supporttd and encouraged the use of technology to drive 
productivity. However, Year 2000 is different and (fagnands a different strategy. Year 2000 is not a 
productivity issue or simply a technology iasue becwse electronic systems are central to our basic 
econmnic structure. We must be more proactive in pr o tec tin g the technology finmework that suj^mrts our 
communities and our eco n omic syttenu. 

My fiftti recommendation is tiiat we present Year 2000 as a positive event in our evohiticm as a technology- 
driven economy. Hiis is a challenge of trememfous proportion but it is a challenge of will. We know how 
to solve Year 2000. The question is whetiier we have the will to do it 

Hie sixtii recommendation would be to review financing for Year 2000 at ail levels of govenmient With 
tile forecut of a loceision many of the recent mcieased revenues ctmiiiig to government from income taxes 
and capital gains would be reduced at a time when tiiere would be an increase in dwwnH for government 
services. This could clearly create a budget shortfoU for many public bodies rather the current surplus 
conditioa as found in some cases. 

The following are some further thoughts for possibly a later discusaioiL Certain scctms of the economy 
like the medical industry, which derives significant revenues fiom govemmat, may need special 
assistance, like in tiie fonn of block tranafen of funds in the event transaction systems are not functioning 
properly. 

Contingency planning tiitoi^out the public sector will be an important part of the planning imicess for 
Year 2000. One thing is also certain. Year 2000 is a dynamic event, not static and will require constant 
evaluation as we move toward conyliance. 

To add a sense of urgency in tiie government I would recosmiend weekly reporting of system progress to 
identify lagging programs quickly and to instill within an organization tire overall time constraints. The 
current quarterly reporting is insufficienl for rapid response. 
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We recognize the scope of this issue and these are just some mihaJ thoughts and tune will not permit an all- 
encompassmg discussion. 

However, as a first step, if we can galvanize the Nation toward a goal of compliance and send the message 
across the land and to all orir trading partners and friends, of the importance and seriousness of Year 2000, 
then 1 think we are on the road to a prosperous new millennium. 

In closing let me indicate the important role this Committee has provided by informing us of Year 2000 
status within the government Many of us deal wifri diis information on a daily basis and find it very 
imp ortant in onr anal ysis. On behalf of all those who have seen and used this material, thank you for your 
diligent and forthright efforts. 
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Mr. Horn. That’s a most helpful statement. I think you are right 
on target, based on your private experience that you have had and 
are involved with. 

The next presenter is Mr. Dan Steinberg, who is the president 
of Synthesis: Law and Technology. 

Mr. Steinberg. 

STATEMENT OF DAN STEINBERG, PRESIDENT, SYNTHESIS: 

LAW & TECHNOLOGY 

Mr. Steinberg. Good jiftemoon, Mr. Chairman. I am pleased to 
appear before this committee to discuss the problem and the top 
priorities for action/reaction. My top priority today and for the rest 
of the time remaining is infrastructure. Infrastructure is the key 
issue, in my mind. 

I am focusing in my oral testimony on telecommunications and 
electricity, but there are parallels in all the other infrastructure 
sectors. First, the risk. The big risk in all infrastructure is the risk 
of cascade failure; that is; the risk of one thing bringing down ev- 
erybody else. This kind of cascade failure is hard to predict, dif- 
ficult to prevent, and hard to diagnose, even after the fact, as 
AT&T found out recently in a non-Y2K related major failure that 
they had. What happens is in the field things don’t work the way 
you expect them to. 

To illustrate this, I use the example of Viagra, and no, this is not 
a Viagra Joke, it’s deadly serious. People died. Why did they die? 
The unexpected happened in the field, and I leave it to your imagi- 
nation what the field is, but there was an unexpected interaction, 
despite the fact that they did incredibly exhaustive testing on this 
drug and had full regulatory oversight. The unexpected happens. 

How does that relate to what I am talking about today? Here is 
an example a little closer to home. This is my PCS phone. When 
I came off the plane on Saturday, I turned it on, I had messages 
waiting, I said, OK, I have to retrieve my messages. Sorry, this 
code is not recognized. The carrier here doesn’t recognize the codes 
from my carrier in Canada. It also decided that my phone had call- 
er ID suppressed. I don’t suppress caller ID, I want the world to 
know who I am when I call. Now that could be really critical if 
there was an emergency call I am trying to make and somebody 
has caller ID suppression rejection, as I found out. 

So what it is is the various telecom players can’t get it together 
to agree on the simplest thing like how to retrieve a message, what 
is caller ID, how do you suppress it, how do you decide whether it’s 
there or not. Things happen unexpectedly in the field and they 
don’t even interoperate perfectly or 100 percent in a day-to-day op- 
eration, and that makes me pretty worried. In case of telecoms, we 
in North America, and I speak as a Canadian, although not as a 
representative of the Canadian Government, are connected to the 
world, and there are msiny, many, many candidates for failure and 
we can’t even decide who they are today. I can’t point any fingers. 

The World Bank just did a survey, released, I believe June 11, 
and half the people basically failed to respond. But I know from a 
bitter experience that the foreign players are most likely way, way, 
way behind us. Because, first of all, they have less access to infor- 
mation. Ninety percent of the information on Y2K is published and 
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disseminated in English, which is great for us but terrible for the 
rest of the world who doesn’t speak English, and this is highly 
technical information that is not suitable for that automated trans- 
lation you get in consumer electronics that you sort of wonder 
about. 

They also have less money. This comes as no surprise. We give 
foreign aid to most of the world. It should be no surprise that those 
without sufficient funds, who are worried about funding right here 
in town, they cannot solve their problems quickly enough. 

There are cultural differences that in some cases make disclo- 
sures difficult. I am not knocking any particular culture, every cul- 
ture has a hole, but in this case there may be certain barriers to 
full disclosure that will keep them behind us. God knows it’s hard 
enough to get disclosure in North America. 

Finally, every country has a different regulatory environment 
and in some countries, if they have to make a change to telecom 
infrastructure because the existing standard doesn’t work, it may 
be against the law. We certainly don’t have time to renegotiate 
telecom agreements. They take years to do. We only have a year 
and a half left. 

Given all this, what can we do to decrease the risk? Well, I 
frankly don’t understand why firms have been reticent to make full 
disclosure. It is really in their best interest. If a firm knows that 
something is likely to fail and they fail to disclose it, they are open- 
ing themselves up to a big time lawsuit, the kind that makes the 
papers. Now, if they make a disclosure, sure, they may lose some 
business, but what is likely to cost more, losing a little business or 
a few dozen big time lawsuits? 

The thing you have to remember about disclosure, for those in 
the audience who are fortunate enough to not attend law school, 
is upon disclosure the plaintiff has a duty to mitigate. That means 
they have to safeguard property against loss; they have to seek 
treatment if there is a likelihood they are ill. In short, they have 
to do what it takes to minimize their loss, and if they are mini- 
mizing their loss, they can’t sue for as much. Now, in some cases, 
it’s impossible to mitigate, but those are rare cases. 

Now, the disclosure I would like to see mandated is what are 
firms doing to investigate their international partners’ compliance, 
and what steps are they taking to insulate themselves from cas- 
cade failure, because knowing about something and doing nothing 
about it is almost as bad as not knowing about it in the first place. 
But if they have to disclose, they have to investigate, and if they 
have to investigate, who knows, they may even do something. 

1 am looking, in general, to narrowly tailored remedies. Those re- 
cent broad brush, safe harbor legislations, I am very much against 
them. They will have the potential to trigger lawsuits early, en- 
courage people to do forum shopping, and most importantly, they 
will decrease or eliminate the very reason to work on compliance 
that has finally gotten people to do some work, which is the fear 
of being sued. The fear of failure was not sufficient back in 1996. 
It took people worried about being sued to get them started, and 
I am not recommending any massive new disclosure requirements. 

In summary, what I am recommending is, first, a declaration by 
Congress that Y2K is a global problem, a call to officers of infra- 
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structure companies to recognize the advantages of disclosure, 
mandating specific disclosure of the investigation of the compliance 
of their partners’ services, not their coffeemakers, and the steps 
they are taking to insulate themselves from cascade failure. If you 
are going to have that disclosure, you need some sort of watchdog 
agency to track these disclosures and issue a report card on a reg- 
ular basis. TTiat is the stick. The carrot might be some form of limi- 
tational liability here, not outside of the country, for losses due to 
cascade failure for firms that disclose the risk in advance, with evi- 
dence; and, finally, some sort of mechanism to protect infrastruc- 
ture here from lawsuits, if they have to cutoff a foreign partner in 
contravention of any existing agreement. 

I thank you for your interest in the year 2000 problem, and I 
would be happy to answer any questions you may have at this 
time. 

[The prepared statement of Mr. Steinberg follows:] 
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STATEMENT ONi^j jTElRB^G 
PRESIDENT 

SYNTHESIS: LAW & TECHNOLOGY 
BEFORE THE 

SUBCOMMITTEE ON GOVERNMENT MANACXMENT, INFtffiMATION AND 
TECHNOLOGY OF THE COMMITTEE ON GOVERNMENT REFORM AND 
ovERSiorr 

UNTIED STATES HOUSE OF REPRESENTATIVES 
June 22, 1998 

Good afternoon, Mr. Chaimun. I am pleased to appear before the committee to discuss 
the year 2000 problem and the top priorities for action. My fiscua todqr is on electricity 
sad interiuttiniial telecommunications. But the process of finding that fitcus is almost as 
impoftant I have been studying the Year 2000 problem for over 3 yean, and actively 
hewing the Canadian Federal government and private sector clients with their own quest 
for compliaiKe. In all eases, the enrdseoftiA management hu led to the conclusion 
that there la much ftiat is beyond the control of any individual organiration. Ingeaetal,! 
aes three areas of ooncern; 

• Government p ro gre s s 

• Inftaatnicture 

• Internatioiial 

The committee is already seized with the issue of Government progress, so 1 see no need 
to discuss it further. Of the re m ai nin g two, the biggest re m ai nin g priotity should clearly 
be infiastructure. As the CIO of a local bank recently remarked (t^tfae record, of 
course) ‘h doesn't do a lot of good to be compliant and test our partners’ systems if 
neitber of us has electricity'. Infiaatructure is something we tend ro depend on without 
giving much thoughL Mote important, much ofthe current inftaatructure crosses state 
and National boundaries. Crossing borders makes intervention mtne challenging, but still 
feaaible. Everyone has their own prioritiea, but most agree that critical infiastructure 
includes: 

• Banking and financial markets 

• Electricity 

• Water 

• Fiid 

• Tdecommunications 

• Tranapott 
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Every single one of these has an mtemational component I will focus on electncity and 
international telecommumcations in my examples, although there are parallels in other 
sectors I have included a list of key questions regarding other infiastructure components 
as an appendix to this testimony. But again, my focus and my recon jnendations are on 
electricity and international telecommunications. 

Let me begin with telecommunciations. It is the international component in many cases 
that makes this challenging. Why is the international aspect a problem? First the 
basics. Everything you have already heard about Y2K in the US is true for the rest of the 
world. What you have probably heard includes: 

• 82% ofPrpject Managers decided afterwards that their preliminary budget was too 
low (Cap Gemini survey) 

• prefects started late 

• it took a while to get senior management involved. 

It’s a serious enough problem here in North America to require regulatory intervention, 
government oversight at various levels and a massive awareness campaign. In an 
international context, the problem is: 

• the rest ofthe world has less informatioo that we do. A large percentage of the work 
written about Y2K is in English, and those that don’t speak English very well are at a 
distinct disadvantage. They don’t have ready access to the volumes of awareness, 
tiwhnirjii and legal information available to North American firms. And the limited 
amount that may get translated might not even be applicable. For example, there is a 
dearth of civil law information on Y2K liability. Yet much of the world operates 
under civil law. English-speaking common law jurisdictions had the benefit of 
discussing legal issues since at least early 1996. It is difficult to get lawyers to agree 
on anything, but in the intervening years we have at least managed to gain consensus 
on the major issues. This process is only just beginning in many civil law 
jurisdictions. And they have just as much trouble reading each others’ languages 
each other as they have reading English. 

• Other countries have very different regulatory environments, so they may be slower 
to requite disclosures. They may be required by law to follow certain standards that 
North American companies have learned to avoid in the interest of Y2K compliance. 
In some cases, regulatory waivers may be requited in order for them to achieve 
compliance and interoporability with North America. 

• In certain cultures, admitting to a mistake is a serious loss of foce. This may have 
caused them to delay longer than we in North America did. We in North America 
have (for the most part) have finally moved on fimn trying to assign blame into the 
challenge of getting things fixed in time. This transition may be delayed in other 
countries for the above-mentioned cultural reasons. 

• Other countries just don’t have the same level of financial resources. Any country 
receiving foreign aid should be suspect as they have already demonstrated that they 
are lacking in resources. 
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As much as it might be tempting to walk away from these countnes, we have to interact 
with them. North Amencan firms buy/seli products/services globally. Infiastiucture 
components tike banking, telecommunications, etc. are interconnected in shared 
infiWucture. This view is shared by the current administration. In his testimony 
before Congress April !, 1998, John Koskinen said: 

“Finally, the Council will have a world-wide focus. We live in a global economy 
that is increasingly dependent upon the electronic exchange of financial and otho 
data. Unfortunately, it is not dear that all other nations are devoting the 
appropriate level of attention to the year 2000." 

“While this is the one area in which the Council may have the greatest difficulty 
in exerdsing influence, we need to do everything that we can to raise awareness 
in other countries. Therefore, the Council will work with Federal agencies to 
leverage the influence of international organizations like the United Nations, the 
World...”' 

With respect, I think that there is more than can be done and should be done on an 
international level. There is a risk in almost all infiastiucture of cascade fiulure. That is 
the Mure of a component causing othera to fiul as well. Often, cascade failures are 
brought about by the simple process of a component broadcasting too many error 
messages. Because of this, we have to attack the problem on two fionts: 

• Decrease dqiendencies on fordgn telecommunications infiestructure 

• Increase their level of activity 

T«Jnp.nminiiniriirinn« 

A key target for this action is telecommunications infrastructure. Tdecommunications 
failure could have catastrophic impact on business and public security. Unfortunately, 
even today there is some disagreement as to the extent of the tdecommunications 
problem. 

"Fortunatdy, telecommunications networks are designed to be foult-toierant and 
there is no reason to believe that one or two Y2K-reiated fiulures could lead to a 
chain reaction that could disable large parts of the nation's tdecommunications 
netwoiks,' Powell said in his testimony for the House Ways and Means 
Committee's ovenight subcommittee. 

The FCC, however, couldn't provide the General Accounting Office, 

Congress' watchdog agency, with data on the progress being made by 
maior long-distance carriers to fix their Year 2000 problems, according 
to GAO official Joel C. Willemssen.^ 


liltp-J/www.y2k.g(iv/coiiiicU/tl040l98.him 

hnp://www.cIiicago.tiibiiiie.ooiii/versianl/aiticle/D,137S,SAV-9806170080,00.litnil 
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To add perspecdve to thu uncertainty, remember the recent AT&T outage. The whole 
network was brought down by what amounts to the broadcast of errors encountered 
during the testing of a device. A large number of error messages being broadcast over a 
network can flood that network and effectively shut it down. This is called a cascade 
failure. Considering this domestic example, how likely is it that international 
telecommunications carriers will bring down our domestic network? How should we 
protect ourselves? 

We live in an exceedingly complex world, where unexpected interactions are a &ct of 
life. Consider Viagra, liiis dmg underwent extensive testing before release. Yet several 
people died. These people were cardiac patients. Most of them were used nitroglycerin 
as well as Viagra, '\hagra is a vasodilator. It ‘loosens’ the blood vessels (primarily m a 
certain part ofthe anatomy), facilitating blood flow. ‘Nitro’ is also a vasodilator. One of 
the first things they check for drug interactions is synergy between common products 
(like using two drugs that have a vasodilator efiect). So why did people die? Didn’t the 
company test this? Didn’t the regulator verify the appropriateness of the drug testing 
before granting approval? Of course they did. In the lab. What they probably failed to 
account for (and who can blame them) is what happens ‘in the field’ to people of that 
particular age group. You can bet that the company didn’t want people to die. You can 
bet that they spent many hours working on product safety and thinking about the possible 
problems. Yet people ^ed just the same. And you can bet that someone will get sued as 
a result. 

The same kind of unexpected results can happen in telecommunications ‘in the field’. So 
it is reasonable to expect that even with extensive testing, there may be some failures in 
local infiastructure. As a resident of the Northeast, I can personally testily to the 
inconvenience brought about by this wimer’s weeklong fieezing rain in January. No one 
could have prevented the miyor hydro pylons from fitllmg after a week’s worth of ice. 

But what could have been prevented were the thousands of local foilures and consequent 
cascade failures because the trees near the power lines were not cleared often enougtu It 
looked like a good idea at the time; clear away fi-om the local lines every two years 
instead of one. Save a pile of money. But again, they failed to consider what could 
happen in an extreme case (more thra two days offiwzing rain at a time). Asthe 
incidents piled up in the command centers, two things happened. They ran cut of fi-esh 
troops to fix the lines and the managers started seeing double in the command cemers. In 
both in.stances personnel started making mistakes fivm fidigue. Will they get sued? 
Probably. Ifl wanted to, I could be first in line. But I would rather they took steps to 
avoid a repeat performance. The biggest thing they could do for me (short of putting all 
wires underground) would be to ensure that their own standards for the right-of-way are 
enforced on a yearly basis. Think of this as a simple innoculation against some of foe 
effects of fiee^g ram It’s not much to ask in retrospect, but I would probably have 
more hick whh a lawsuit. I may end up having to file just to force foe utilities to do 
something. Bottom line: no one can say with absolute certainty today that there will be 
no disruption. It’s just too much to ask 
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Because of this, for Y2K, we actually have time to do analogous “innnciilations’ up-front 
This apphes both locally and internationally. It is therefore unperative that the level of 
remediation and testing of foreign telecommunciations infrastructure be as thorough as 
possible within the citient time constraints. If they don’t make sufficient progress, we 
have to do something: 

• Embarrass them with disclosures, or 

• Exercise regulatory authority or some other means to cut them off It is possible 
under existing law to direct regulatory authorities to cut foreign dependencies to 
protect American interests. 

Key questions (I have to admit that I don’t have answers): 

Given the risk of cascade Mure, it makes business sense to plan for such a contingency. 
At what point does it become the obligation of a telecommunications carrier to cut off a 
foreign country to prevent cascade failure? Can it be done pre-enqitivdy? Do the 
carriers know thernselves? Most importantly, do they have the ri^ to take unilateral 
action under their existing agreements? 

Elcctiigity 

From recent Senate testimony: 

Only two out of 10 of the mrior utilities contacted by the US Senate's special 
committee on the Year 2000 issue said that they had even completed an 
assessment of what had to be done. Mote disturbing, none have formed any 
contingency plans to cope with conqniter Mures.’ 

It it evident that the local regulators have been unable to get the public utilities to take 
appropriate action. Electricity is in moat jurisdictions a regulated monopoly. That means 
tM citizens cannot go to a competitor if they suspect their supplier will have a Y2K- 
related Mure. But the users of electricity will certainly be upset if such a failure occurs 
and there will undoubtably be lawsuits. It is clear that here is an excellent opportunity for 
disclosure as a means to diminish the legal bloodbath and perhaps decrease the possibility 
of injury or death. Another way to avoid lawsuits would be to provide safe-harbour 
legislation, but that would serve to remove the reason for reme^ation. 

Again, there is the possibility of cascade Mure. I spent a fow nights in the dark because 
of &ilure somewhere else on the grid gave my local transformer fium a serious case of 
indigestioiL I learned a lot more about the fi^lity of the grid than I really warned to. 
This leads me to suggest that utilities should take steps as well to innoculate themselves 
from cascade Mute. 

At what point does it become the obligation of a public utility to cut off another utility in 
order to prevent cascade Mure? Can it be done pre-emptively? Do the utilities know 
themselves? Most importantly, do they have the right to take unilateral action under their 
agreements? 


’ liltpy/webserv.vniiiiet.com/www_user/plsql/pag_vini_new3.n^_baiiie7p_stoiy*S6468 
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Summaiy of Recommendations. 

THINK CH-OBALLY, ACT LOCALLY 

The timeframe for action is short. For this reason alone, I cannot recommend an omnibus 
bill that will be referred to too many committees and be delayed. Rather, I propose the 
introduction of limited changes. These recommendations serve to diminish the risk of 
infrastructure dilute and at the same time diminish some of the risk of litigation. 
Litigation is a Sword of Damocles hanging over all businesses (and many governments). 
Thm have been many estimates as to the litigation amounts. Some have said trillions, 
but who really knows? We can’t rdiably predict the quantum ofthe damages until we 
know what will fiul and how well people are pr^ared for dilute. 

The key to this is disclosure. In general, it is in an industry's best interest to disclose 
potential loss to the right people. This is a good way to avoid punitive damages 
(unless the risk was disclosed foolishly as in warning that a dam would fitil without 
any evidence of cracks or leaks). On an individual basis, firms normally weigh the 
ri^ of loss due to disclosure (lost sales, decreased share price, etc.) against the risk 
of damages subsequent to an actual event. To get around this balancing act, h is 
easier to get disclosure finm industry associations. 

What is key is that once a risk is disclosed, there is a duty to mitigate where a 
potential plaintiff has been put on notice. Plaintifd (in general) must take reasonable 
precautions to: 

- preserve and safi^uard property 

- seek treatment in the event of injury 

- etc. 

So the declaration of a forseeable risk should preclude recovery of the big ticket 
additional damages. In the case of a monopoly utility, there is not even an immediate 
business loss to be weighed. But unless the disclosure was deemed reckless, there 
riiould be no liability to a power conq)any if a property transaction failed to close 
because the buyer didn't want to locate in a neighbourhood ^ere there was going to 
be a power dilute. 

In other industries, disclosure does raise the possibility of loss of business, and 
companies have to weigh this possibility against the size of the eventual lawsuit(s). 
But even in non-regulated environments, I believe that the benefits will always 
outweigh the upfront costs of disclosure. It has been said that disclosure will bring 
on lawsuits. My contention is that the lawsuits would occur anyway if there is a 
Mure. Disclosure may affect the timing, and it certainly should reduce the amount 
of damages, but it should not cause any new cause of action to be created. 
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My recommendations follow the theme of measures to encourage disclosure in key 
mfiastructure mdustnes. Again, my position is that broad brush measures are 
inappropriate for this crisis. There is not sufficient time to fine-tune such measures and 
theie is a serious danger of overkill. Rather, 1 pre pose the following narrowly-tailored 
remedies. These remedies target infiastructure players in an attempt to get them to 
insulate us fi'om both local problems and foreign failures over i^ch they have limited 
control. 

In the short-term, I propose: 

1 . a declaration by Congress that Y2K is a national and global problem of the utmost 
urgency 

2. a call to officers of infiastructure companies to recognize the advantage of disclosure 
in preventing certain lawsuits (irrespective of opinions to the contrary by legal 
counsel). To be effective, someone should go and talk to these officers and explain 
the ramifications of disclosure. 

3 . mandating specific disclosure on the steps each public utility (and possibly other 
infiastructure player) is taking to prevent a cascade foilure This puts the focus on 
wfaaf s important without imposing an overly onerous reporting burden. It's simple 
and doesn't involve setting up a massive organization to track progress either. If 
utilities have to report on it, they have to think about h. If they have to think about it, 
maybe they will actually do something about h rather than ftu lawsuits from 
unhappy customen. 

4. Establishing a watchdog agency to track progress of critical infiastructure industries 
in both remediation and disclosure 

5. A limitation of liability fiir infiastiucture companies solely for domestic follout fiom 
international failures. This may require the proviso that the likelihood of such 
fiuhnes must be declared in advance AND backed up with evidence. This relief 
could conceivabiy be extended to other industries if it proves efiective. 

6. Provision of a mechanism (i.e. protection fiom lawsuits) whereby the US could 
foroefpennit infiastructure players to unilaterally cut off foreign partners and/or entire 
countries if it appeared that they could impact services. This is similar to the use of 
the right to adequate assurance of performance under UCC 2-609 and the UN 
convention on the inteniational sale of goods (articles 71 & 72), but would 
specifically targets services. 
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While not the focus of my presentation, there are minor measures that could be 
undertaken to focilhate government Y2K progress as well. These are items to 
consider in a few months’ time (or earlier if things start looking bad): 

• suspension or elimination of 3 rd party trriiie damages in Y 2K contracts governed by 
FAR&DFAR 

• a specific attomey/client priviledge for all government, attorneys working on Y2K if 
government, priviledge gets deemed inapplic^le by the courts 

• require a foil Y2K legal audit for ail public companies, the idea being that once they 
have the information, it becomes obvious that it is in their best interest to disclose 
because this information will be discoverable in an eventual lawsuit. This is a last- 
resort to get people talking, and would need accompanying 

guidelines/methodology/etc. and someone (another agency) to watch over the process 

• specific waivers from anti-trust action on industry cooperation on Y2K efforts. The 
current statement from DOJ is a non-statement, but that's not what has prevented 
people from talking up to now. They just didn't have anything usefol to share (but 
they will, and they all have in-house counsel opinions telling that they dare not share) 

• specific penalties for Mure to perform in a particular industry sector. For example, 
SlOO/day per customer for power fiulures of more than x minutes m a day. Or 
SlOO/day/customer for lack of diahone or international diahone (as applicable). 

• Financial aid to developing countries specifically for Y2K remediation of 
international infiastructure components. 

Rnally, I have come up with a list of points I have seen raised elsewhere that I feel 
would be inappropriate. Things to avoid (if at all possible) include: 

• generic safe harbour legislation • any safe harbour legislation would immediately 
trigger every lawsuit that had not yet been filed and cause plaintifi& to go forum 
shopping. 

• acceptance ofthe validity of state safe-harbour legislation in mter-govemmental 
agreements. There is no reason to encourage this behaviour and when citizens 
realize what has happened, the governments that enacted such legislation will be 
extremely unpopular. 

• mandating specific dates for compliance or findng industries to correct one class 
of problems over another. This is a good way to get blamed for any meases 
without really knowing if you are doing good in the first place. Let companies do 
tlietr intenud triage using their own best judgement. You might want to look at 
penalties for Mure to perform, however (as discussed above). 

• New bankruptcy protection. There wili probably be many firms that try to 
escape liability via bankruptcy protection. The existing legislation, if adequately 
enforced, is sufficient to prevem fiaud. 


I thank the committee for its interest in the year 2000 problem. You can make a valuable 
contribution to the effort. I look forward to working with you to inoease understanding 
on these issues, and I would be happy to answer any questions that you may have. 
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APPENDIX A 

OTHER INFRASTRUCTURE ISSUES TO OINSEDER 
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It is clear that governments are seized with the issue Y2K on an international scale But 
what of the thousands of firms that do business globally (or at least internationally)? 
There has been much discuss'on in the literature of the ‘food chain’ issues and how they 
affect an organization. The food chain becomes an order of magnitude more complicate 
when you fiuzor in the international aspect. This paper cannot unfintunately provide 
answera. In many cases, the questions have not been asked. In other cases, the answer 
changes so radically fi'om country to country that no generalized statement can be made. 

To get the ball rolling, 1 have assembled a brief list of questions that I believe need to be 
answered in orda to minimiz e disruption to firms operating abroad. The questions are 
primarily focused on infiastiucture issues. Everyone has their own definition of critical 
infiastiucture, but most agree that it includes: 

• Tran^itation 

• Banking and financial markets 

• Electricity 

• Water 

• Fuel 

• Telecommunications 


Transportation 

What if a ship cannot leave harbour because the port is under quarantine? If a 
countries' medcal infiastructure collapses due to Y2K problems in the hospitals, 
quarantine may be necessary. 

What if a ship cannot leave harbour because the harbour infrastructure has broken 
down? There are many things that can go wrong, including: 

• Failure of automated refueling systems 
« No working payment system 

• Cargo cannot be loaded 

• Failure of environmental control systems 

• Failure of local infiastructure like electricity, fuel delivery etc. 

In both of the above examples, there will surely be insurance claims made. But who 
should pay? 

How about airport closures and/or no-fly zones? It is evident that the regulatory 
authorities will take the steps that are necessary to avoid urmecessary risk to passengers. 
But what happeps to those caught outside the US? Unless there is certainty of failure 
of air transport, it is doubtfUl that foreign employees will be ‘called home’. W^o will pay 
for their losses? And how will they get home? 
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Banking and fi nancial maricets 

Think of all the steps involved m an international Letter of Credit (LC) It only takes one 
failure to stop the process If a foreign focuiry does not receive the LC, they don't 
produce. If foey don’t produce, some North American company will be sitting idle 
waiting for goods. Many finns have sent out questionnaires to their trading paitners 
asking about Y2K compliance. But how many (inns asked the sane question of evny 
bank in thmr LC chain? And of course the old fovoiite “How rdiable are the 
responses?” 

Electricitv 

As stated in the main testimony, there is some disagreem e nt as to the extent of the 
problems &dng the various pibiic utilities in North America. It is difficult to 
bdieve that anyone can say with assurance that they will not have a problem 
before an assessment baa been completed. Has any information on higher degree 
of Y2K assessment work being done in foreign countries? Not that I have seen. 
So it is easy to conclude that there is the potential for fiulure of the grid in foreign 
countries. The question is; “which onefs)?” 


Water 

Everything that has been said about electricity can be extended to water. In addition, 
there is a risk not only of delivery ftilure but quality control problems. This problem is 
exacerbated in regions where the source water is significantly more 'dirty' t^ the 
source for most North American treatment plants. Can (inns operate in fore^ 
countries in the absence of drinking water? b it even worth trying? 

Fuel 

Fuel delivery is dependent (in part) on the transportation infiastructure, particularly large 
supertankers. There has been much discussion of late on the potential for problems with 
embedded chips on supertankers. Can lufRcient ftid delivery be gnaranteed in 
foreign eonntries where firms are operating? If not, can the firms continne to 
operate? 


A key target for investigation is telecommunications infiastructure. Unfortunately, as 
stated in my main testimony, even today there is some disagreement as to the extent of 
the telecommunications pr^lem. Again, I point to the recent AT&T outage. The whole 
imtwtnk was brought down by what amounts to the broadcast of errors eiKouiiteted 
during the testing of a device. A large number oferror messages bring broadcast over a 
network can flood that network and efiectively shut it down. This is called a cascade 
failure. Consideting this domestic example, how likdy is it that international 
tdccommnnications carriers will bring down our domestie network? How shonld 
we protect oarsdves? 
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Key QuesnoM (I have to admit that I don ’t have answeraV 

Given the nsk of cascade failure, it makes busmess sense to plan for such a contingency. 
At what point does it hecome the obligation of a telrcommnnications carrier to cnt 
off a foreign country t s prevent cascade failure? Can it be done pre-emptively? Do 
the carriers know themselves? Most importantly, do they have the right to take 
unilateral action under their agreements? Do their customers have the right to 
make such demands? 


General Business Environment 

Finally, a few questions in the context of the general business environment Can North 
American firms do business in a country whose health care system is in fail mode? 

Is such a faflure considered forseeable under US tort law? Is it forseeable under the 
foreign countries’ tort law (or civil law equivalent)? b such a faiinre forseeable 
under the terms of current insurance policies? And most importantly: “have local 
counsel been retained to represent our interests abroad?” 

The foregoing are quesdons that I believe each firm must consider for each country they 
do business in. Just what everyone wanted: more work. 
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Mr. Horn. Those are most helpful, practical suggestions, and we 
thank you for them. 

Next is Mr. Alan Simpson, the president of ComLinks.Com. 

STATEMENT OF ALAN SIMPSON, PRESIDENT, COMLINKS.COM 

Mr. Simpson. Mr. Chairman and distinguished members of the 
subcommittee, the ability to communicate is the essential cement 
that holds together the building blocks of our modem society. Over 
the past century, we have crafted a complex, global, electronic com- 
munications network, which seamlessly allows us to send our mes- 
sages anywhere on the surface of the Earth and even to the depths 
of the oceeins and into deep space. 

Today I need to address both the technology, consequences of 
failure and the need for a global media message explaining year 
2000. This message needs to reassure the public, explain the im- 
pact of the millennium bug, and the actions that need to be taken 
to minimize its effects. 

Every day trillions of dollars of global wealth are transmitted 
electronically around the world from New York. This wealth is re- 
transmitted again and again in the course of a normal business 
day. This is done electronically by computers, using date dependent 
software over date dependent networks. 

On initial examination, telecommunications networks seem not 
to be affected by dates. They appear to consist of copper wire, fiber 
cable, and satellite links, all connected by switches. Few realize the 
massive, computerized infrastructure that supports this circuitry. 
This support infrastructure is often ignored, and is of little con- 
sequence if the computer that connects the c^l is compliant, if the 
billing computer has automatically disconnected the cahers through 
nonpayment to that account for the past 100 years. This complex 
network carries much more than financial transactions. It carries 
the control signals for power stations, switch and commands for 
electricity grids, gas and oil pipelines, and the information to man- 
age critical infrastructure services, such as water, sewage, £uid en- 
vironmental systems. 

Here is the first problem. This highly sophisticated command and 
control network depends on the telecommunications network. The 
telecommunications network depends on clean electric power, elec- 
tric power generation, and distribution depends on telecommuni- 
cations. It’s a catch-22. 

Both the telecommunications network and the power generation 
distribution grid can operate at less than 100 percent, without 
damage to the critical infrastructure. There exists a point where 
the losses in the generation capacity and distribution capacity are 
multiplied by gaps in the telecommunications network. This can 
create a dangerous, critical mass. 

Looking at the global perspective for a second, we are not an is- 
land insulated from the telecommunications problems of the rest of 
the world. We trade, we communicate, and we point nuclear mis- 
siles at each other. The potential for catastrophic 
ihiscommunication in 2000 is immense. One prudent safety vedve 
will be to have the global nuclear shutdown from a mutually 
agreed period over midnight and into 2000. The question is, how 
will a launch system react if it believes it has lost communications 
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with its command and control masters for 100 years? That should 
be asked of all the world leaders. These world leaders should also 
be asking if the web of diplomatic outposts, the Embassies and the 
consulates will be able to keep them informed, as well as effectively 
deliver their cables and messages to their hosts. The last thing the 
President needs to find out from CNN is that one of his Embassies 
has been occupied. 

It is not only the United States that needs to ensure unambig- 
uous and clear communication channels. In this age of nationalistic 
emd local tensions, we must all ensure the regional trigger fingers 
are kept away from weapons, especially nuclear weapons. In areas 
of high tension, the last thing we need is no communication be- 
tween diplomats. There needs to be a communication plan to 
prioritize the use of scarce circuits in the event of failure. Little 
Freddy calling his aunt to chat needs to be given less priority than 
the major h ank transferring funds or an essential business trans- 
action. Until this problem is resolved, which it will be, there may 
have to be a rationing of circuits. 

Critical supplies. In the 1980’s, we were sold on the idea that 
just in time was the answer to maximize profits. This concept will 
be put to the test, especially with critical materials and subassem- 
blies from overseas. Major corporations should examine their com- 
munication links to their overseas offices, and as a worst-case sce- 
nario, ensure that there are buffer stocks of critical materials, sup- 
plies and subassemblies. Additional stocks in business need to be 
planned in consultation with the banks, for an increase in stock 
levels will trigger a credit warning in the lending departments of 
the bank. Let them know this is prudent contingency planning, not 
a downturn in business. 

Effective communication means getting the message through, re- 
gardless of transmission medium. There are alternative means of 
maintaining business communications. These must be explored. 
Sitting pretty, hoping the telecoms will get their acts together in 
time is not prudent business memagement. If there is no dial tone, 
think plan 6. 

On to the message now. There are those who compare the disrup- 
tion from the year 2000 millennium bug to be akin to World War 
II, especially the denial, lack of preparation and global con- 
sequences. Winston Churchill is often quoted in many of his 
speeches. Many forget that President Roosevelt skillfully prepared 
the United States for war, held by Hollywood and those in the 
media with foresight. Industry was prepared and the White House 
showed positive leadership, preparing for the crisis. 

We hear the sky is falling. No, the sky is not falling, it’s just the 
computers won’t work. This is the crux of the awareness problem. 
If the sky was falling, the river flooding or the blizzard blowing, 
then we could relate to these events and, using historical prece- 
dents, realize we were facing imminent danger and act accordingly. 
This generation has never known shortages. They have never 
known a crush in the economy. They cannot perceive that the 
United States can possibly allow such a situation to occur. They 
are currently in complete denial of their technology or that elected 
leaders can allow such a scenario. A large segment of the popu- 
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lation is waiting for Bill Gates and Microsoft to release MS 2000, 
the millennium virus fixer. There is no millennium virus fixer. 

The predominant group affected by year 2000 are the baby 
boomers. They are the ones who will see their investments, real es- 
tate, retirement, emd way of life decimated when the worst case 
scenario occurs. The baby boomers are well known to react like a 
shoal or herd. One turns, they all turn. One panics, they will all 
panic. This is the worst-case scenario for the banks. If this herd is 
spooked with only 1.5 percent cash reserves, panic withdrawals will 
crush the system and create a self-fulfilling prophecy. 

It is the duty and responsibility, therefore, of all governments to 
prepare the populations for a time of crisis. In the new global infor- 
mation age, we would have assumed that the leader of the United 
States would have led the global awareness and rectification cam- 
paign. We assumed wrong. 

We need world class leadership now to give the people of the 
global information society true and positive leadership. We must 
not create a general environment of pessimism. We must create 
from strong leadership an environment that the problems can and 
will be fixed. It is in this type of environment that this country was 
able to mobilize its enormous resources and prepare for World War 
II. 

In conclusion, Mr. Chairman, we have a serious communication 
problem, both with the technology and the message. The good news 
is that both the technology and the message can be prepared to 
serve the Nation and the world during the year 2000 transition. 
We can find alternative routings for data. We can, if needed, jerry- 
rig circuits to continue operations and we certainly can craft an ef- 
fective media campaign to prepare, educate, and inform both the 
Americjui public and the people of the world. 

Keep in mind, if the worst-case scenario occurs on a global scale, 
the United States will be blamed for this catastrophe. The world 
will point to the computers, software, and technology developed and 
supplied by the United States for everything that goes wrong with 
their economies and infrastructure in 2000. We need communica- 
tion planning now. Failure is not an option. 

Thank you, Mr. Chairman. 

[The prepared statement of Mr. Simpson follows:] 
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Communications & Year 2000 


Mr. Chaimian and distinguished members of the Subcommittee. 

The ability to oommunlcats is the essential oemant that holds logattiar the building blocks of our 
modem society. Over the past century we have crafted a complex global electronic 
communication network, which seamlessly allows us to send our messages to anywhere on the 
surface of the Earth, and even to the depths of the oceans, and out Into deep space. 

Today I need to address both the technology, consequences of Mure, and the need for a global 
madia massage explaining Veer 2000. This massage needs to reassure Ihe public, explain ttis 
impact of the ‘MBannIum Bug*, and action that rteeds to be taken, to mtnlmtss It's afts^. 


The Technology 

The Problem 

Every day trtlllorts of dollars of global wealth ere transmitted electronically around the world, from 
that spot on the Earth's surface known as New York. This wealth Is retransmitted again, and 
again. In the course of a normal business day. This Is done electronically by computers, using 
date^ependant software, over date^apendent networks. 

On Initial examination, telecrxnmunicatlons networks seem not to be affected by dates. They 
appear to crxisist of copper wire, fiber cable and satalllta links, connected by switches. Few 
realize the massive oomputertzed infrastnjcture that supports this circuitry. 

This support infrastructure Is often Ignored. It Is of line consequence If the computer that connects 
the call Is compliant. If the billing computer has automatically disconnected Ihe callers line, 
through non-payment of their account for the past one hundred years. 

But this complex network carries much mors than financial transactions. It canies the control 
signals for power stations, switching commands for electricity grids, gas and oil pipelines, and the 
Inftxmation to manage critical infrastructure servicss such as water, sewerage and environmental 
systems. 


“Catch 22" 



63 


Hare B the first probtem This highly sophisticateci commend and control network depends on the 
telecommunications network The telecommunications network depends on dean electnc power. 
The elediic power generation and distribution system depends on telecommunications. 

Both the telecommunications network, and the power generation and distribution grid, can operate 
at less than 100%, without damage to the critical Infrastructure. There exists a point where 0ia 
lossM in the generalkm c^stfjtlty. and dtsirktubon capability, mdtiplied t^ gaps m the 
tdecommunicaiione n^work can create a dangerous critical mass. Under nonnal circumstance 
this condition can be tepidly corrected, using alternative circuits, and signal paths. Ail indications 
point to starting 2000 with a reduced level of options. 

“Ttiree SMItea and You're Oug 

For the tetoconnimkt^ions network the Year 2000 problem wHi be the third strike, between now 
and 2000. 

First there will be the peak of the micro-metaorits shower, this event could seriously effect space 
assets, such as telecommunicatians satalittes. There is the possibility that there could be no 
effect. Every piece of dust, or debris could miss the hundreds of orbiting satellites, or impact with 
lltUe effect. 

The worst case scanarto Is that a number of satellites, with their data and voice circuits, could be 
destroyed, or crippled. We need to ensure the vuinerebility lessons, ieamsd from Galaxy IV, have 
not been forgotten. 

The next event Is 'Solar Max 23*. where the Sun reminds us that it controls our life on Earth. This 
burst of energy could have tragic, or littls effect on the satellites, spared by the micro-metsoilte 
onslaught This event could, Iflte aaftier Solar Max's cause disniptlon In power grids. Again, we 
rraist wait and see, but In the meantime create a number of 'Tehat ir scenarios for our operations. 

These “What r soenarlos must be included In any contingency planning for Year 2000. It is 
essential that a level of safety be maintained in number of available circuits, and space assets, 
and we do not blindly assume 100% of all satellite circuits will be at our disposal on 1/1/2000. 


We are not an IslarKf, insulated from the telecommunication problems of the rest of the world. We 
trade, communIcatB and point nuclear missiles at each other. 

The potential for catastrophic mia-communication is immense. 

The conrwns of New York banks, and their credit transactions, pale in comparison with the 
scBnarto of global fiienno^udear holocaust laused by a crxnputer malfunction. 

One pnrdent 'safety valve' would be to have a global nuclear shutdown for a mutually agreed 
period over midnight and into 2000. The question, 'How will a launch system react, if it beiieves it 
lost communication with It’s command and control masters, for 100 yean,' should be asked of 
the world leaders. 

These world leaders should be also be asking if the web of diplomalic outposts. Embassies, and 
OmsuMes, wfl be able to keep them informed, as well as eliectivaly dellvar their caUm, and 
carmnurficatione, to their hosts. 

In the case of the United States of America, I am concerned that The Department of State has 
such a pathetic rating on the scorecard, prepared by this committee. It Is essential that they have 
comprehensive plam, to maintain secure communications, especially from the 'Hot Spots' of the 
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Tr»ln«&Bo«t«aPI»nt» 

There is no mcxe dangerous an area for mis-communication than in the area of transportation, 
especially In aviation. The demands of the travailing public have been met by cramming an 
extraordinary number of planes Into a small congested area. 

This global air traffic conM network Is a masterpiece of technology, sofrtiisdcatad, yM aging, 
electronics, and dedicatsd wsIMralned personnel. Unfortunately It has to deel with irats, economy- 
minded, and impatient passengers, who demand convenient flights in ait weathers. 

The airlines own the planes. The airports control them on the ground, and the air traffic 
organizadons of governments, control them In the air. They are supplied with fuel by third parties, 
and ate sarvtcad by a whole army of computer managed entllles, from fire crews to maintananca 
personnel. 

Behind this complex operational network is another one for administration, encompassing travel 
agencies, reservation systems, scheduling, personnel, financa, and finally the Insurers. If these 
Insurers do not feel confident then the planes are groundedi Any aspect of this complex puzzle 
can bring the world's aviation Industry to a crawl, even a halt. 

The FAA responses to Ihls committee has raised doubts about the ability of the Air Traffic Control 
Network, to manage the current level traffic, during and ImmadiaMy ^tar the millannium 
changeover. The safely of the travelling public needs to be honestly reported, free of speculation, 
yet subject to massive penalties for hiding the truth. 

Fortunately the aviation industry has awoken to the problems, and is taking steps to ensure It will 
have all the facts avaHabls, to make safe decisions for this busy travel period. Navarthelaes Ota 
avietlon industry will be under the microscope. 

The railroads on the other hand have somewhat missed the public scrutiny. Few realize how 
dependant modem railroad systems are, on computer networks. Over the past few months we 
have seen confusion in communicatians. especially In scheduling rolling stock. 

The scheduling of rolling stock, and the control of points and switches, must be addressed by the 
oversight committees. The scenario of the Soviet Union, In eartler decades, with crops rotting in 
the fleids, and famine In the mqor cities, must not be allowed to become the United States in 
2000. with crops rotting in Calilbmia and Florida, with no rolling stock, or tall lines available to 
bring the produce to New York, Chicago, or the other major centers of population. There Is no 
excuse, given the time scale, for breakdown of critical lines on communication, and supply. 

The shipping Industry poses a diffsrsnt problem. Supertankers are computer controlled, their 
operation loo complex for humans. Fortunately their numbers ara small, and they do act 
somewhat In bolatlon. The sharping companies are aware of the dangers of valves 
maifunctloning, or worse stW, a massive tanker failing to slow down, and plou^ing ktto some port 
faculty, at full speed. The danger of valve malfunction whilst connected to a refinery is another 
matter. The enormity of the embedded system problem Is just being realized. 

Embedded systems, ilka Year 2000, pose a threat beyond comprehension, which leads to the 
second communication Issue, the message. Few can comprehend Y2K. 


The Year 2000 Message 

There are those who compare the disruption from the Year 2000 'Millennium Bug" to be akin to 
World War II, especially the denial, lack of preparation, and global consequences. Winston 
Churchill is often quoted, and many see parallels in many of his speeches. 
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wortd, tBKmg mto account that the local telecommunicatrans infrastructura may be fragmented, 
that space assets may not be available, and that the old standby of HF may be senously impacted 
by solar actli%. 

The last thing the President needs to find out from CNN, is that one of his Embassies has been 
occupied. 

But it Is not only the United States that needs to ensure unambiguous and dear communication 
channels are avaiiabie. In this age of nationalistic, and local tensions, we must ail ensure the 
regional trigger-fingers are Kept away from weapons, especially nudear weapons. In areas of high 
tension the last thing we need Is no communications between diplomats. 

There needs to be a telecommunications plan, to prioritize use of scarce dmuits. In the event of 
tehne. UtBa FtetMie caNfrig his aunt to ch^ needs to be given less priority Stan a m^ balk 
tiai sf er rin g funds, or at essential business transaction. Untfi this problem is restrived, vMch it wW 
be, there may have to be rationing of circuits. 

In the case of the worst case scenario being realized, which we hope will never happen, then we 
need to find alternative transmission paths for critical communications. This could be achieved, in 
me^ urban and business centers, by utilizing wireless tachnoiogies, and even mnning cables 
around Manhattan streets. The potential of using Cable TV lines for intsrconnecbng businesses 
needs hi be addressed by all Communications, or fT Managers. 

Above all. Corporate Olllceis need to be aware that the Year 2000 protHam is one of business 
survival, and It's consequences have been known for the past 30 years. Not being prepared to 
makitain asaanllal services is not an option. Careful planning, and altamative communication 
strategies, canrieutrallzamany of the effects of Y2K, Ownership of this responsibility lies with the 
officers of each Individual company. 

CtWeal SuppHee 

In the 1980's we ware sold on the idea of ’Just in Tims', as the answer to maximize profits. This 
concept will be put to the test, non more searching that with critical materials, and sub-assemblies 
ftem overseas. 

corporalfons should examine their communication links with their overseas offices, and as a 
worst case scenario, ensure them am buffer stocks of critical materials, supplies and sub- 
assemblies. This needs to be achlevad In consultation with the banks, for an increase in stock 
levels will trigger a credit warning in the lending department of the bank. Let them know this Is 
prudent contingancy planning, not a downturn In business. 

Every company, that is trading on a global scale, should be undertaking contingency planning, 
eipedally for transmission of crfllcal lUta. The old concept of messangem, or couriers, needs to 
be In plan as a last resort If data lines the not avaiiabis, or ureeliable, than make provisions to 
cany removable magnetic, or optlcaf madia, by courier. The focus at this lata st^ is to keep the 
business alivs, and runnitiB over the millennium changeover. Instead of a ninner with an Olympic 
Torch, have a ninner with a floppy disk. 

Effactivs communication means getting the message through, regardless of transmission medKiml 
There are altematlvs means of maintafning business communications, these must be expiorad. 
Slttktgpretly, hopbig the Telcos wM get thefr acts together in tima. Is not prudent busfoess 
man^wnent. It to becoming (riivious that many Telcos, especially ki third world cmirffries, have 
only just become aware of the issues, and the problems. Suing the carriers after the event is not 
a practical recipe for business survival. 

If there is no dlai tone.. ..Think "Plan B* 
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Many forget that Praaident Roosevelt sicillfully prepared tha US for war, halpad by HoVywood and 
thoee in the media with foresight. Industry was pr^iarsd. and the White House showed positive 
leadership, preparing for the crisis. 

Today, eighteen months away from potanfially tha worst global crisis since World War II, 
leadership is totally lacking. This Is suiprising considering this adminlstradon wil have to foce tiie 
elactorate in 2000, months after the crisis has sbuck. 

“TheSkvIsFallltW’ 

No, the sky is not foiling, if s just that the computers won’t workl 

That is Ihe crux of the awareness proUam. If the sky was foiling, the river frorxling, or tha blizzard 
blowing, then we could relate to tha events, and using historical precadents, reakzs we were 
fodng imminent danger, and act accordingly. 

TsHing tha public that the computers cani do arithmetic, and they face immlnsnt danger, is such 
an abstract crxicept that most do not taka it seriously. 

This generatirxi have never known shortages. They have never known a crashing economy. They 
can not perceive that the United States can possibly allow such a situation to occur. They are 
currently In complela denial, that their technology, nor their elected leaders, can allow such a 
scanario to occur. A large segment of the papulation is waiting for Bill Gatos and Microsoft to 
releasa MS 2000, the ‘MUannium Virus Foret', at $49.95, from your local c ompu t ei' store. 

There is no 'Millennium Vitus Fixaf. 

“Don't Snook the Herdi* 

Tha predominant group afbctad by Year 2000 are tha 'Baby Borxners’. They are lha ones who 
wll see their Invastmants, real estoto, ratkement and way of Ilfo dadmatod If the worst case 
scanario otxairs. 

The 'Baby Boomera' are wall known to react like a “shoaf, or 'herd'. One turns, they all turn, one 
panics, they all panir;, one buys yuppie four-wheel drive, off road vehicles, Manhattan is foil rif off- 
road vehides. 

The task for tha media managers, and PR practitioners, is to prepare the 'herd' for a rough patch, 
without them stampeding and crushing the drovers underfoot. A stampeding herd crashes 
through, and destroys everything in its path, indudkig many of Hs own. 

Major Banks are especially at risk from this 'hertf mentality of the 'Baby Boomers'. WWi only 
around 1 .5% cash reserves in US banks, any panic withdrawals could crash the system, and 
create a self-folfilling prophesy. 

There are those on the fringe of Y2K, who would welcome such a crash. This could statistically 
occur from one pessimistic feature on the evening TV news. If ratings were seen to soar, the 
ratings-lad, entertoinment-blased news executives would nin this story to M's bitter end. 

It is essential that major banks, and corporations, inforoi and prepare, their customers, investors, 
and suppliers for the possible Impact of Y2K, and their progress towards a safe, and comfortable 
transition. Cunentty the lawyers are blacking most sources of information, demanding silence at 
all costsi But like an earthquake fault, the longer H wails, the more energy it builds up, and the 
greater the destructive power, when it finally breaks and moves. 

It Is the duty, and responsibility of a government, any government, to prepare the population for a 
time of crisis. In the new global information age, we would have assumed that the leader of the 
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United States, would have led the global awareness, and rectification campaign We assumed 
wrong. 

We need a world-class leader to emerge, and give the people of the global Information society, 
truo end positivs leadership. 

“Ifs Too Lite!" 

The doomsayers preach that it Is too late, that alt Is already lost No It is not too latel 

“Get on with the job, and fix what you can* should be Ihe message. Start with the mission-critical, 
or core-business systems, and work outwards. The non-essential systems can be fixed later. 

We must not a general environment of pessimism. We must create, fnxn strong leadwshp, 

an environment that the problems can, and wai be fixed. In this type trfenvironmwit this country 
was able to mobilizs Ifs enormous resources and prepare for Wodd War il. 

The key of course is strong, positivs, and believable leadership. 

MwllaPIfifi 

Mffiiy reading this testarxiny may take offense at refarrmg to the public In behavioral terms as a 
‘shoaT or "herd". That describes how they react The “hertT is more accurate for Y2K. because 
when the true picture is known, the public win get very angry, and possibly vioient 

We are accused of only giving the public bad news, doomsday scenarios, and unsubstantiated 
figures. Unfortunately those are the only figures the corporate lawyers will rsisase. 

Every company, government department, state entity, county, or dty, should be initiating a media 
plan to inihrm, and reassure the public. The President should dreedy be taking the kiitlBtivs in 
this, and using the extensivs media apparatus avaSable to the White House, to address the 
nation, and the world. 

Silence is counter-productive, and dangerous. 

In conclusion, Mr. Chairman, we have a serious communications problem, both with the 
technology, and the message. 

The good news is that both the technology, and the message, can be prepared to serve th^ 
nation, and the world during the Year 2000 transition. We can find altemative routings for data. 

We can, if needed ^erry-rtg* circuits to continue operations, and we certainly can craft an effective 
media campaign to prapare. educate and inform both the American Public, and the people of the 
world. 

Keep in mind. If the worst case scenario occurs, on n global scde, the United States will be 
blamed for this catastrophe. The world win point to the computers, software and technology, 
developed and supplied by the United States, for everything that goes wrong with their 
economies, and Infrastructure in 2000. 

We need communication planning now. Failure is not an optioni 
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Mr. Horn. Thank you very much. You have put it in very simple 
English that anybody should be able to understand, and we thank 
you for that presentation. 

Our next speaker is Mr. Bruce Webster, the chief technical offi- 
cer, Object Systems Group, director of the Washington, DC Year 
2000 Group. You might explain what that is. 

STATEMENT OF BRUCE F. WEBSTER, CfflEF TECHNICAL OFFI- 
CER, OBJECT SYSTEMS GROUP, AND DIRECTOR OF THE 

WASHINGTON, DC YEAR 2000 GROUP 

Mr. Webster. The Washington, DC Year 2000 Group, with over 
1,300 members, represents people working in all areas of the Y2K 
problem here in the Washington, DC area and elsewhere. I am 
honored to appear before you, Mr. Chairman, and this committee 
today, both representing myself and that group as a whole. 

Humanity has been developing information technology for half a 
century. That experience has taught us this unpleasant truth. Vir- 
tually every information technology project above a certain size or 
complexity is significantly late and over budget or fails altogether. 
Those that don’t fail are often riddled with defects and difficult to 
enhance. The causes stem not from technology but from human 
frailties. Indeed, when asked why so many IT projects go wrong, 
in spite of all we know, one could simply cite the seven deadly sins: 
Avarice, sloth, envy, gluttony, wrath, lust, and pride. It’s as good 
an answer as any and more accurate than most. 

In the midst of all this, we face the chasm on the road ahead, 
known as the year 2000 crisis, which has its roots in all the sins 
related. Anxiety has begun to set in through the public and private 
sectors as the true scope and difficulty of the Y2K problem, with 
its foundation in all the regrettable IT business practices of the 
half century become apparent. For the first time in those 50 years, 
these organizations face a problem that is inexorable, with a dead- 
line that is immovable. The difficulties cannot be finessed, buried, 
rescoped, bought off, reorganized away or dragged out until they 
are finally ft?ed. There is too much complexity to handle, too much 
damage to undo, too little time to allocate, and too few people to 
deploy. What, then, can and should we do? I believe our best course 
lies in four principles: Recognize, resolve, repair, refrain. 

Recognize. We need a broad public acknowledgment of the na- 
ture, scope, and difficulty of the year 2000 problem, starting with 
President Clinton and followed by other leaders in the administra- 
tion, in Congress, in the military industry, and elsewhere. A good 
friend of mine admitted that years ago he went through a sub- 
stance abuse program and says he has been quite amused and fas- 
cinated at all the classic and well-documented forms of denial and 
self-deception he has observed in people at all levels dealing with 
the year 2000 problem. Industry and society must realize that the 
Federal Government isn’t going to solve their problems; indeed, the 
Government will be hard pressed to solve its own. And that no 
other organization, vendor or individual, least of all. Bill Gates, 
will come riding up with a miracle solution. 

Resolve. We need to resolve that whatever the nature and level 
of Y2K consequences, we will pull together as communities, as in- 
dustries, as a society, and as a Nation. With that cohesion, even 
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major Y2K events can be weathered. Without it, even minor Y2K 
events could be disastrous. 

Repair. We need to do the work. It will be long, difficult, expen- 
sive, and tedious, and will probably last well into the next decade, 
but what we can repair and replace, we should, and as quickly as 
possible, using the necessary priorities. 

Refrain. We must refrain from our long established and self de- 
feating patterns in information, technology, business, law, and gov^ 
ernment. The most critical restraint, as far as humanly possible, 
and perhaps a bit beyond that, we must voluntarily refrain from 
Y2K litigation. 

One of the best run year 2000 repair projects in America, and 
therefore in the world, is right here in Washington, DC at Fannie 
Mae. The head of that effort, Carol Teasley, distributed to her staff 
some months back a clipping from an article in Parade Magazine, 
written by Thomas Ricks based on his book, “Making the Corp.” 
The clipping details what Ricks felt the fundamental lessons were 
at the U.S. Marine Corps boot camp at Parris Island. Carol told her 
staff that these were the operating principles for the duration. Tell 
the truth; do your best, no matter how trivial the task; choose the 
difficult right over the easy wrong; look out for the group before 
you look out for yourself; don’t whine or make excuses; judge others 
by their actions, not their race, or, I might add, their position, po- 
litical party, or profession. 

I would suggest that a top to bottom application of these prin- 
ciples in Government, the military, industry, and society at large 
is our best hope for determining the true scope of the problem, re- 
pairing as much as we can and minimizing the impacts that do 
occur. I would also submit that virtually any major year 2000 re- 
pair effort or contingency plan not following these principles will 
fail. 

Exactly 58 years ago last Thursday, Winston Churchill gave 
what is perhaps his most famous address. He sought to rally the 
British Nation in the wake of Dunkirk and the fall of France, ask- 
ing them to brace themselves for the task ahead. What, we have 
to ask, will those of the mid-21st century say of us? Will they say 
that January 1, 2000 was, to paraphrase our own World War II 
leader. President Roosevelt, a virtual day of infamy, a sad and 
tragic symbol of short-sightedness, incompetence, denial, blame, 
and political maneuvering, or will they look back at midnight of 
December 31 of next year and say of our generation, as Churchill 
felt the future would say of his, this was their finest hour? The 
choice, I submit, is still ours, but won’t be for much longer. 

I would be happy to answer any questions the committee might 
have. 

[The prepared statement of Mr. Webster follows:] 
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Mr. Chairman and distinguished members of the Subcomminee, I am honored to appear 
before you today. 1 do so representing not jxist myself but also the 1300 members of the 
Washington D.C. Year 2000 Group, most of whom work on or deal with this problem full time 
in the government, the military, corporations, educational institutions, and other organizations. 

I didn’t come to Washington to do Year 2000 work— its not what my company does— but 
like many others, I was drafted into it. Once involved, I became profoundly concerned, both 
because of the scope of the problem and my own professional experience with information 
technology projects large and small. A quote from Shakespeare has repeatedly come to mind 
during the past 18 months while observing those who arbitrarily set schedules and deadlines, or 
who make blithe statements about how simple the problem is and how readily they will solve it. 
It’s from Henry IV, A« III, Scene 1. In it, the character Glendower boasts of his supposed 
command over the leading technologies of his day, declaring, “I can call spirits from the vasty 
deep." Another character, Hotspur, with a firmer grip on reality, replies, “Why, so can 1, or so 
can any man; but will they come when you do call for them?" 

Humanity has been developing information technology for half a century. That experience 
has taught us this unpleasant truth: virtually every information technology project above a 
certain size or complexity is significantly late and over budget or fails altogether; those that don’t 
fail are often riddled with defects and difHcult to enhance. Fred Brooks explored many of the 
root causes over twenty years ago in The Mythical Man>Month, a classic book that could be 
regarded as the Bible of information technology because it is universally known, often quoted, 
occasionally read, and rarely heeded. Most publications and books on IT since then have debated, 
discussed, and deplored these same problems. And they are with us still. Their causes stem not 
from technology but from human frailties. Ind^d, when asked why so many IT projects go 
wrong in spite of all we know, one could simply cite the seven deadly sins: avarice, sloth, envy, 
gluttony, wrath, lust, and pride. It is as good an answer as any and more accurate than most. 
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In the rm<ist of these human challenges, we place ever-growing demands on information 
technology. Like ratcheted gears on a torture rack, the tension only increases; there is no relief; 
things never simplify. Part of that is beyond our control, a natural consequence of the complex 
systems— social, economic, informational, technological, logistical, and even political— that we 
have nourished and which now enmesh us. Those complex relationships have made our miracle 
economy possible, giving us low inflation, low unemployment, low interest rates, and steady 
growth. But they also create the situation where a currency crisis in a small Southeast Asian 
country roils fmancial markets around the world and impacts the monetary policy of the richest 
nation on earth, or where a single strike at a single supplier can cause the world’s largest company 
to shut down most of its North American manufacturing operations, furloughing tens of 
thousands of workers. 

The other part of the problem comes from our fundamental ability to conceive and demand 
systems more complex than we can safely build, and our unwillingness to acknowledge and deal 
with those limitations. While only optimists successfully build complex systems, many complex 
failures come from those who are both opcimistic and ignorant, or perhaps just arrogant. In the 
field of information technology, we have begun and abandoned the tower of Babel repeatedly in 
the past half century, ranging from innumerable small project failures to the incomprehensible 
1 1-year, S4~biilion IT modernization fiasco at the IRS. New foundations start each day. 

In the midst of all this, we face the chasm on the road ahead known as the Year 2000 cnsis, 
which has its roots in all the sins related. True familiarity in this case breeds deep concern; it is 
ignorance of the problem's actual scope and ramifications that yields popular contempt. Indeed, 
the Y2K controversy differs from most popular scientific disputes— such as global wanning— in 
that there are few ideological overtures, the reality of the problem is trivial to prove, the 
consequences are sure and soon, and it is the most technical, informed, and involved praaitionen 
who are most worried. Two surveys were done of the membership of the Washington D.C. Year 
2000 Group, one in March and a repeat survey in May, to ask their projeaions of the Year 2000 
impact in the United States. Both surveys yielded the same results. Two-thirds of the members 
responding felt there will be at best an economic slowdown; one-third felt there will be at least a 
strong recession and regional infrastructure failures; a tenth foresaw a second Great Depression or 
worse. Even when the votes from those who might stand to profit from such concerns— vendors, 
consultants, and lawyen— were faaored out, the results remained largely the same. 

Likewise, anxiety has begun to set in through the public and private sectors as the true scope 
and difficulty of the Y2K problem— with its foundation in all the regrettable IT and business 
praaices of the past half-century— become apparent. For the first time in those 50 years, these 
organizations face a problem that is inexorable with a deadline that is unmovable. The difficulties 
can’t be finessed, buried, re-scoped, bought off, reorganized away, or dragged out until they're 
finally fixed. There is too much complexity to handle, too much damage to undo, too little lime 
to allocate, and too few people to deploy. 

What, then, can and should we do? I believe the best course lies in four principles: recognize; 
resolve; repair; and refrain. 

Recognize. We need a broad, public acknowledgement of the nature, scope, difficulty, and 
potential impact of the Year 2000 problem, suiting with President Clinton and followed by 
other leaders in the Administration, in Congress, in the military, in industry, and elsewhere. (A 
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good friend of mine told me that many years ago he went through a substance abuse program; 
because of that experience, he is fascinated by all the classic and well-documented forms of denial 
and self-deception he’s observed among people at various levels confronting the Year 2000 
problem.) Each organization needs to discover and be honest with itself about the status of Y2K 
challenges inside and outside. Industry and society must realize that the Federal government isn’t 
going to solve their problems— indeed, the government will be hard-pressed to solve its own— 
and that no other organization, vendor, or individual, least of all Bill Gates, will come riding up 
with a miracle solution. 

Resolve. We need to resolve that whatever the nature and level of Y2K consequences, we will 
pull together as commtmities, as industries, as a society, and as a nation. With that cohesion, even 
major Y2K events can be weathered; without it, even minor Y2K events could be disastrous. 

Repair. We need to do the work. It will be long, difficult, expensive, and tedious, and it will 
probably last well into the next decade. We can’t get it all done in time; simple mathematical 
exercises demonstrate that for the embedded systems alone, we can only hope to get a small 
percentage tested, repaired, and replaced by the end of next year. This means will we also have to 
fepair whatever economic, infrastructure, and even ecological damage is caused when Y2K 
problems hit. But what we can repair or replace, we should, and as quickly as possible. 

Refrain. We must refrain from our long-established and self-defeating patterns in information 
technology, business, law, and government. Without that, we have little hope of making things 
better; as another friend is fond of saying, if you keep doing what you’ve always done, you’ll 
keep getting what you've always gonen. The most critical restraint: as far as humanly possible, 
and perhaps a bit beyond that, we must voluntarily refrain from Y2K litigation 

One of the best-run Year 2000 repair projects in America— and therefore in the world— is 
right here in Washington at Fannie Mae. The head of that effort, Carol Teasley, distributed to 
her staff some months back a clipping from an article in Parade Magazine (November 9, 1997) 
written by Thomas £. Ricks based on his book, Making the Corps. The clipping details what 
Ricks felt the fundamental lessons were at the USMC boot camp at Parris Island. Carol told her 
staff that these were their operating principles for the duration: 

■ Tell the truth. 

• Do your best, no matter how trivial the task. 

• Choose the difficult right over the easy wrong. 

■ Look out for the group before you look out for yourself. 

■ Don’t whine or make excuses. 

■ Judge others by their actions not their race (or, I might add, by their position, 
political party, or profession). 

I would suggest that a top-to-bonom application of these principles— in government, the 
military, industry, and society at large — is our Iwst hope for determining the true scope of the 
problem, repairing as much as we can, and miniinizing the impacts that do occur. I would also 
suggest that virtually any major Year 2000 repair or contingency effort not following these 
principles will fail. 
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Exactly fifty-eight years ago last Thurstiay, Winston Churchill gave what is perhaps his most 
famous address. He sought to rally the British nation in the wake of Dunkirk and the fall of 
France, asking them to brace themselves for the task ahead. What, then, will those of the mid-2r 
century say of us.^ Will they say that January 1", 2000, was— to paraphrase our own great WW^I 
leader, Franklin Delano Roosevelt— a virtual day of infamy, a sad and tragic symbol of short- 
sightedness, incompetence, denial, blame, and political maneuvering? Or will they look back at 
midnight of December 31* of next year and say of our generation, as Churchill felt the future 
would say of his, “This was their finest hour.* The choice, 1 submit, is still ours— but won’t be 
for much longer. 

I would be happy to answer any questions that you or the Subcommittee members might 
have. 


Bruce F. Webster (www.bfwa.com/bwcbsten bwebstcr@bfwa.com) is Chief Technical Officer of 
Object Systems Group (www.osgcorp.com), an international consulting firm working to help 
Fortune 500 companies successfully develop and deploy information technology. He is based out 
of Washington, DC, where he does high-level consulting on Year 2000 issues, software 
development management and organiaation, information technology infrastructure, objea- 
oriented development, reuse, and quality assurance. He has helped engineer a dozen commercial 
software products and has published three books and over 160 articles. He also serves as Chair of 
the Washington D.C. Year 2000 Group (www.wdcy2k.org), the largest and most active Y2K 
organization in the world. 
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Mr. Horn. Well, that’s an excellent statement. We have one more 
presenter, Mr. Tom McCabe, Chairman of McCabe & Associates. 

Mr. McCabe. 

STATEMENT OF TOM McCABE, SR., CHAIRMAN, McCABE & 

ASSOCIATES 

Mr. McCabe. Thank you, Mr. Chairman. Mr. Chairman and 
members of the committee, my name is Tom McCabe. I have been 
invited to assess the year 2000 conversion efforts and recommend 
a responsive strategy, and I am very happy to do such. First, I 
want to commend you, Mr. Chairman, and the committee for focus- 
ing attention on this huge problem and noting its urgency in the 
crisis it beholds. 

My background is as a mathematician and a scientist and I have 
been involved in developing techniques and methods to test com- 
puter software, and I want to say in front of this committee that 
I am very deeply concerned about the status of the year 2000 con- 
version and the real possibility of massive failures at that magic 
date. 

I have been involved in testing mission critical systems for the 
military and commercial sectors for long before the year 2000. The 
question in that arena has always been will the system work. And 
the answer has always been the same, and that is that one has to 
test very rigorously to be certain. When testing is done correctly, 
it provides objective information with a greater sense of security 
that the system being remediated would actually work. 

The question about where we stand today on the year 2000 can 
therefore only be answered by looking at the kind of testing that 
is being performed today on these systems. Structured testing is 
based on an objective and quantifiable set of metrics. Integrators 
and weapon system developers have for years used such discipline 
testing as the best practice. The GAO’s report and testing guideline 
also endorses such disciplined testing as the best practice. At least 
10 companies offer year 2000 test discipline coverage tools, and 50 
large integrators provide solutions doing the same. Process re- 
ports indicating compliance must incorporate testing metrics about 
dates to validate what was and was not done and tested. Reports 
without such coverage metrics concerning dates are merely ran- 
dom, subjective assessments, which may create a false sense of se- 
curity. 

Mr. Chairman, since there is currently no requirement for an ob- 
jective measurement of date testing or reporting, the answer to the 
question about where we stand on remediation today is that no- 
body knows. That is quite unacceptable and, I might add, very, 
very dangerous. 

The Government’s Inspectors General, for example, have discov- 
ered that several systems, reported as being compliant, failed when 
they attempted to test them in a year 2000 environment. These 
systems failed because of the absence of such date-related metrics 
in disciplined testing. Such failures have also occurred in the com- 
mercial sector as well. 

A major insurance company recently ran exhaustive tests on a 
system that had 25,000 logic paths, of which only 200 contained 
dates. The testing coverage indicated that the original testing 
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reached only 10 of the 200 dates passed. Mr. Chairman, testing 
metrics showed that the program was in fact about 5 percent test- 
ed, and that, I might add, is a veiy frequent occurrence. 

What then is my recommendation for action? 

First, that we require rigorous testing for mission critical soft- 
ware which will incorporate date-related test metrics and coverage. 
Second, that it is required that we have compliance reporting based 
on these date metrics. 

If you refer to those suggested by the GAO, Mr. Chairman, it’s 
only when you have reliable information based on sound testing 
procedures in metrics that you can begin to manage the remaining 
remediation. Two Harvard professors in their book, “The Balanced 
Scorecard,” say it best when they state, “If you can’t measure it, 
you can’t manage it.” 

With only 557 days remaining, we have neither the time nor the 
resources to test ever 3 rthing. If we attempt to test all the systems, 
most of this effort will be wasted and ineffective. 

Therefore, I urge the committee to demand targeted testing 
aimed exclusively at the date code in every mission critical system. 
This testing will not only reduce the risk of failure but will also 
identify the high-risk areas for contingency planning. 

The cost of year 2000 testing is substantial, between 50 and 70 
percent of the total conversion effort. Mr. Chairman, targeted, 
structured testing requires fewer resources and saves time. Indus- 
try experience including Nabisco, Prudential, Citibank, Merrill 
LTOch, and Paine Webber has typically shown that only 25 percent 
of the lomc is date-related. Therefore, a testing plan that focuses 
specifically on those dates will save 75 percent of the resources. 

The results are faster testing, more focused testing, reduced ef- 
fort, less expense, emd a better coverage of the specific dates that 
are causing the problem. The savings impact is confirmed in a let- 
ter from GAO to Congressmen Kolbe and Hoyer which states: How- 
ever, disciplined test mamagement, including the collection and re- 
porting of metrics, is not an expansion of these activities, but rath- 
er is part of an effective testing process. 

In conclusion, targeted testing based on metrics aimed at the 
date code requires less time euid effort and will save the Govern- 
ment resources. In the coming days and weeks leading to January 
1, 2000, this committee’s continued involvement through a rigorous 
reporting system of this date coverage will be every bit as impor- 
tant as any recommendation I can m^e. 

I thank you for your time. I will be happy to take any questions. 

Mr. Horn. We thank you very much. 

[The prepared statement of Mr. McCabe follows:] 



invited here today to assess the status of the Year 2000 conversion effort 
and to recommend the most important priorities for the remaining time 
avaiiable. I am happy to do so. First, however, I wish to commend you, Mr. 
Chairman, and the Members of the Committee for focusing on Year 2000 
conversion and for recognizing the urgency of this crisis. 

I am a mathematician and scientist speciaiizing in testing metrics and 
validation techniques for computer software. I was involved in testing 
mission critical systems for the military, aerospace and telecommunications 
sectors long before Year 2000 became an issue. 

The ultimate question is always the same - will it work? Never have those 
words had greater meaning than they do today. When done correctly, 
testing provides objective information and a greater sense of security that 
what has been developed or repaired will actually work. Risk of failure can 
only be understood when such testing is done. Therefore, an accurate 
answer to the question, “Where are we today on Year 2000 conversion?" - 
can only be answered by looking at the type of testing and reporting that is 
actually being done. When making that assessment we must also 
understand that Year 2000 presents a specific problem - a date-related 
problem - and consequently, a specific type of testing needs to be done. 
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Structured testing is testing based on objective and quantifiable metrics 
Numerous systems integrators and weapon systems developers have 
used such disciplined testing as best practices for more than a decade. 
The use of such testing procedures and metrics is aiso inherent in the GAO 
best practice testing guideiine for Year 2000 as outlined by my colieague on 
this panel. For Year 2000 tecting, there are at least ten companies that 
offer test coverage tools and at least 50 large Integrators that routinely 
provide disciplined, metrics-based testing services. 

Progress reports indicating system compliance must incorporate testing 
metrics to validate what was and was not fixed and tested. If progress 
reports do not include such test coverage metrics, then you are not getting 
factual and objective information. Rather, you are getting random and 
subjective assessments that may create a false sense of security. Mr. 
Chairman, since neither test coverage metrics nor the duty to report the 
extent of test coverage are currently required government-wide, it is 
impossible to ascertain the status of the government's remediation and 
conversion efforts. Since there is no standard of measurement for testing 
or reporting, the answer to the question, 'YVhat is the status of the 
remediation effort today?" is - NO ONE KNOWS. I find that unacceptable 
and dangerous. 
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The inspectors general of many of the major government agencies, 
including the Departments of Agriculture, Education and Defense, have 
discovered that systems reported as compliant failed when the IG 
attempted to test them in a post 1999 environment. These systems failed 
because of the absence of disciplined testing. The testing was not 
structured, and coverage metrics were not collected or reported to indicate 
that all of the date-related decisions were tested. 

Let me give you an example from the commercial sector. A major 
insurance company recently ran what it considered to be exhaustive tests 
on a program with 25,000 logic paths, of which only 200 contained dates. 
Typically, only a small percentage of the logic contains dates. The test 
coverage metrics analysis indicated that the original testing reached only 
1 0 of the 200 test paths with dates. In other words, testing metrics showed 
that the program was only about 5% tested. This is a typical result of 
unstructured, untargeted, undisciplined testing, whether in industry or 
government. As I said before, testing without coverage metrics results in a 
false sense of security, high risk and unexpected faiiures. 

i was also asked to set a priority for the actions that should be taken in the 
remaining days. My answer is simple and clear: Require rigorous testing of 
mission criticai software which incorporates date-related test coverage 
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metncs In addition, require compliance reporting based on this testing 
standard and these metrics, and I would refer you to those suggested by 
GAO. Only when you have reliable information based on sound testing 
procedures and metrics can you begin to manage the remaining 
remediation and devise contingency plans. Two Harvard professors in their 
book, “The Baianced Scorecard,’ said it best, “if you can’t measure it, you 
can’t manage it.” 

The probiems of today are the result of the delays and lack of focus that 
have characterized this effort to date. If government had started early, 
complete testing of every governmental system would now be well 
underway. We missed early. With only 557 days remaining, we have 
neither the time nor the resources to test everything. If we attempt to test 
everything, most of this effort will bo wasted and ineffective. 

Specifically, given the time remaining, I urge the committee to demand 
targeted testing aimed exclusively at the date code. In the next year, we 
need to test all date-related computer code in every mission critical system. 
This testing will not only reduce the risk of failure but will also identify high 
risk areas for contingency planning. We should also test any other code 
that was changed in the Year 2000 conversion process. 
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It IS widely recognized that the cost of Year 2000 testing is substantial, 

estimated to require between 50 and 70 percent of Year 2000 conversion 

time and resources. Mr. Chairman, targeted, structured testing requires 

fewer resources and saves time. It is the equivalent of a rifle shot versus a 

shotgun approach. Industry experience at Fortune 500 companies 

Including Nabisco, Prudential, Citibank, Merrill Lynch and Paine Webber 

has typically shown that only 25% of the logic is date-related. Therefore, a 

testing plan that focuses exclusively on the dates requires 75% fewer tests. 

The resuits are faster testing, reduced effort, less expense and better 

coverage of date logic. This savings is confirmed In a letter from GAO to 

Congressmen Kolbe and Hoyer which states: 

“However, disciplined test management. Including the collection and 
reporting of metrics, is not an expansion of these test activities. 
Rather, it is part of an effective testing process. If an agency is 
already collecting coverage metrics and using them to manage its 
testing efforts, it may not take any significant additional effort to also 
report these to 0MB in summary form." 

In conclusion, targeted testing based on metrics aimed at the date code 

requires less time and effort and wilt save government resources. In the 

coming days and weeks leading to January 1 , 2000, this Committee’s 

continued involvement through a rigorous reporting system wiii be every bit 

as important as any other recommendation that I could make. Thank you 

for the opportunity to appear before you, and I am happy to answer any of 

your questions. 
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Mr. Horn. The questioning will begin on my behalf by the gen- 
tleman from Virginia, Mr. Davis. 10 minutes. 

Mr. Davis. Thank you, Mr. Chairman. 

Let me start with my good friend, Ed DeSeve, who — we worked 
on so many issues. And I guess, Ed, you do duty today to come up 
here on behalf of the administration. 

I followed this for over a year and a half on this committee now 
and was very happy to see Mr. Koskinen appointed and take the 
role. I think it was late. I think that we’ve been late throughout 
this process. 

As we get later into this in terms of hiring people, the costs keep 
going up because there’s only a finite number of people that are 
trained to do this, and a bidding process between the private sector 
and public sector keeps raising the cost up. I think Congress has 
shown a willingness at every step to come forward with the funding 
levels, if we knew what they were, but the costs keep going up 
every time the administration comes back here. 

I’ve got a few questions for you. First of all, you mentioned in 
your testimony that you’re trjdng to coordinate with the State and 
local governments. That’s absolutely critical. We can solve this at 
the Federal level. But the State and local governments are so much 
more intertwining and sharing of data that get down to the people 
we’re all trying to help. 

We just had Chief Ramsey from the District of Columbia Police 
Department here last week telling us we didn’t have a Y2K prob- 
lem. I reminded him that he was under oath, and he should just 
check with his people. He came back and he said, “Well, maybe we 
do have a problem.” We just got a report back last week, and it 
shows that it was awful. 

I think you’re going to find it varied among different cities and 
counties and States across the country. But we know the Federal 
Government is behind on this and not where any of us would like 
it to be. And my strong suspicion is that State and local govern- 
ments are even further behind. And we have appropriate time to 
come in and test some of this. In other words, we’re talking to each 
other. I think we are heading toward some very potentially serious 
consequences. 

How comfortable are you with the level of progress being made 
by State and local governments at this point? 

Mr. DeSeve. Let me answer that two ways. The first way is look- 
ing at their abilities — State and local governments’ ability to inter- 
face with us in programs that the Federal Government operates, 
whether they be HUD programs, HHS programs, or statistical pro- 
grams. 

We’ve worked with the National Association of State Information 
Resource Officials to inventory all of those interfaces, and we’ve 
posted it on a series of websites, how those interfaces work. 

We’re in the process right now of literally testing them to see if 
we can exchange data and exchange money, quite import 2 mtly, for 
the States across those interfaces. We will shortly have that fin- 
ished and we, together with NASI, will publish that information on 
each interface across the web. 



82 


We are fairly sanguine in that area where we can identify the 
interfaces, and we’ve got about a year to fix those interfaces, and 
it is in our interest and their interest that they get fixed. 

We’re less sanguine in the specific State and local and county en- 
terprises that we know about. We just don’t have a good look at 
what’s going on there. 'There we are working with, first, the Na- 
tional .^sociation of Governors, and then with, I don’t know if it’s 
the big 5 or big 6, to try to give them as much information as we 
have and get from them as much information as we can. 

So we have a pretty good look on interfaces. We have a less good 
look in some of the other areas. 

Mr. Davis. Well, you know, we might — I was just saying we 
might want to do a hearing for the State and local hearings for this 
committee, but the only people that can really coordinate that is 
the executive branch. I am concerned because the information we 
get back, even at the Federal level, tends to be filtered when it 
comes to the top, to the people who are supposed to report back. 
And we just hear too many stories that this information we’re get- 
ting back is feel good and filtered, and some of the people who are 
giving the reports aren’t going to be around for judgment day when 
it turns around. 

I suspect we’re getting the same from State and local govern- 
ments. Of course, if we don’t have time to test this through and 
correct the testing, it can just go all haywire. So I met with Mr. 
Koskinen on this. He has, I think, got in it very late. If he is given 
the resources, I think we can make a decent effort on this. But the 
State and local governments, combined with what we’re doing 
internationally on the embedded chips issue, at this point I still 
don’t think we have a handle on it. 

Our own systems we’ve made some progress on that and are 
working toward that, but it’s all of the other things that go with 
it that make me — I think you’re concerned about it, but we’re really 
nervous about it. 

And — the buck doesn’t stop here. I think we’ve been talking 
about this in this committee in the last Congress, holding report 
cards and everything else. It really stops with the administration, 
and I think that’s where it’s going to rise or fall at this point. 

As time runs out, we want to ensure that we give you the right 
resources, but we can’t give you the right resources if we don’t 
know what they are. Every time the estimates keep coming up in 
terms of what it costs. They keep going up every time. 

We talked about the timely sharing of Y2K reports to 0MB. 
What does that mean? Does that mean that when you get the cop- 
ies, we get the copies? Or does it mean that when you get the cop- 
ies you have a month to massage them and then send them up 
here? 

Mr. DeSeve. No, the only thing we try to do is provide decent 
quality control so the information you get is in good form. I need 
to get it to the chairman — 7 working days, I thought it was appro- 
priate. He asked for 24 hours. I will try to figure out with staff of 
the committee a way that is most effective. It certainly doesn’t 
mean 30 days. 

But sometimes we get information that’s either nonresponsive or 
in the wrong columns, and you would be better off getting good 
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data than having — what do they call it — garbage in, garbage out, 
too early. 

But I would be happy to work with staff to try to set up the pro- 
tocol for the monthly reporting. 

Mr. Davis. I think the chairman would be willing to agree, we 
would be willing to work with you every step of the way, get the 
data when you get it. And if it’s not adequate, work with you. We 
would like to make this a partnership to make this succeed. I fear 
what will happen when things go haywire January 1, 2000. There 
will be a lot of finger pointing. 

Mr. DeSeve. We started working with you 2 V 2 years ago, and 
the first quarterly report was actually back in 1996, and the agency 
data is provided to you in essentially the same time as it’s provided 
to us. And we applaud that and want to continue working in that 
spirit. 

Mr. Davis. But, again, a lot of the people that were signing the 
reports there and some of these agencies — ^FAA one — notably one — 
has switched the coordinators two and three times in some cases 
over that period of time. And so John Koskinen is the guy we’re 
looking for to coordinate all that as we move through. 

Let me just ask, we’re coordinating with a number of countries 
with the year 2000 response classifications, and I noted that a 
number of countries at this point aren’t responding at all in terms 
of what we know. And now you’ve labeled the Ambassadors to be 
the Y2K points of contacts when, based on the current data, the 
State Department itself isn’t even going to be compliant. How does 
this — isn’t there a better way to do this? 

Mr. DeSeve. I think what we want to think about is two dif- 
ferent things going on simultaneously. I believe Treasury will tes- 
tify tomorrow in one of the Banking Committees about their work 
in the G— 8 and their functioned work with bank regulators 
throughout the world. So we approach this not just through the 
Ambassadors but also in the function outreach committees. So that 
the Commerce Department, working in its area, the work that the 
Federal Communications Commission is doing, the work that FAA 
is doing, all with their international counterparts is supplemented 
by the work of the country heads. 

The purpose of the country heads, the Ambassadors, looking at 
the data in their areas is try to get the best assessment of the high- 
est ranking American official in that country of what’s really hap- 
pening on the ground. It isn’t the only thing going on. Because if 
we’re in country A, FAA, FCC, OCC, Treasury and so on will all 
be working together. We’ve asked the Ambassadors in addition to 
give us the benefit of their in-country expertise. 

Mr. Davis. OK. Let me turn the questioning to Mr. Steinberg. 

Most corporate lawyers right now are telling their companies to 
shut up basically, to be quiet. And yet you’re suggesting that we’re 
better off with disclosure. 

Mr. Steinberg. Definitely. 

Mr. Davis. Why are they wrong? 

Mr. Steinberg. Basically, disclosure serves to limit your liability. 
You tell someone there’s a problem, they can’t sue you claiming 
that they didn’t know about it. 
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If you tell them that the brakes are had on a car, they have a 
very hard time of complaining that they drove that car right off a 
cliff because the brakes failed if you already warned them. Some- 
times they have to, if they need to use that car for an emergency. 

Mr. Davis. Walk me through the legal ramifications. I know 
there have been class action suits in Michigan and California. I’m 
already getting mail-outs from law firms that are starting a Y2K 
practice. I assume that’s 

Mr. Steinberg. It’s a growth industry. 

Mr. Davis. Exactly. They’re looking for litigation. We’re certainly 
not going to consider anything of a safe harbor nature in this Con- 
gress and, you know 

Mr. Steinberg. That would be a grave mistake. 

Mr. Davis [continuing]. Everybody would just drop the ball at 
that point. Some States, though, are acting on that. Nevada and 
some others are treating it almost like an act of God. 

Mr. Steinberg. Those States, most of those are calling for safe 
harbor for themselves but not for businesses within that State. It’s 
just you can’t sue the State of Nevada. 

Mr. Davis. Let me ask, walk me through where the legal rami- 
fications of this could be down the road. 

Mr. Steinberg. I would be afraid to speculate on what’s going 
to happen in Nevada. What always happens when something con- 
tentious gets enacted is somebody contests it. Now 

Mr. Davis. On a nationwide basis, walk through some of the fail- 
ures, both the private sector and Government’s ability to get the 
people losing credit, losing deals. This could have very serious 
ramifications, obviously. 

Mr. Steinberg. Yes, well, if in a State the State says you can’t 
sue us and, because of that, they fail to get things done in time, 
or it may not even matter if they get it done in time, but people 
will end up blaming those legislatures for their 

Mr. Davis. You have elections that can resolve that. 

Mr. Steinberg. Pardon? 

Mr. Davis. Elections can resolve that. 

Mr. Steinberg. Elections can resolve that after the fact. You 
can’t roll back the clock by voting somebody out of the office. The 
damage will already have been done. 

Mr. Davis. What would be your advice? There are some private 
companies, some banks that are ahead of the curve. There are still 
some that don’t have a clue, particularly a number of the small 
businesses. We obviously — ^as you get the word out, what message 
would you send to these in terms of this? 

Mr. Steinberg. They have to disclose their risks. First, they 
have to go find out what their risks are, particularly the risks with 
their trading partners, and they have to disclose them so that peo- 
ple can’t turn around and sue them for being foolish. 

Mr. Davis. All right. Let me just ask, to Mr. Simpson, are you 
suggesting that we should undertake a public relations campaign? 

Mr. Simpson. Yes. It started 

Mr. Davis. It started a little bit, the media is starting to pick 
this up. 

Mr. Simpson. 'The last thing we want is a panic. Domestically, 
the last thing we want around the world is everyone pointing their 
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fingers and saying, IBM, Microsoft serve this junk. They should fix 
it, and they should take the consequences. So, yes, I think not so 
much a public relations campaign than an awareness campaign 
from the very top. 

Mr. Davis. Are there any computer simulations that have been 
done with some of the utilities and are there results of what hap- 
pens at this point? 

Mr. Simpson. There’s quite a lot, yes. We have a simulation, not 
very sophisticated. I’m afraid. And one of the scientists called me 
up and said, your model is flawed. You’re looking at the electricity 
industry and the telecommunications industry in isolation. They 
are not. They are interconnected. If one goes down, the other goes 
down. And when you start getting deeper and deeper, it gets worse 
and worse. 

Mr. Davis. I just — with the committee’s indulgence, just one 
question as a followup. Right now, for example — let’s make it easy. 
You have an elevator and, all of a sudden, it reads the wrong year. 
Several things can happen. The elevator can crash. It can get stuck 
between floors. It can go down to the first floor. 

Isn’t one of the problems that we really don’t know what happens 
on that day and in some of these testings we could at least find 
out what the ramifications would be if there’s a failure? 

Mr. Simpson. The elevator situation is slightly odd, because the 
elevator’s compliant. Operators will tell all the elevators are per- 
fectly compliant. 'They are, until they were installed in a building, 
and it is the support systems that attach to the elevator within the 
building that are the problems. And the problem with buildings, 
elevators and phones is not themselves. It’s the ramifications of 
having a building with no emergency telephone. The fire marshal 
won’t let you in there. 

Mr. Davis. I agree. What I’m getting at is not so much to pick 
on elevators is as much as to give the concept. We don’t know what 
happens in a failure, if it goes to the first floor, if it crashes or if 
it stays between floors. Isn’t that one of the problems with all of 
this? We’re not even sure — we know it’s not a good result, but we’re 
not sure exactly how bad it can be in some of these cases? 

Mr. Simpson. That’s true. On the other hand, with an elevator, 
you don’t ride the elevator until they see what they do. 

'That’s not the real problem. The problem is, what are the other 
things? Elevators — a lot of people are paying attention to that and 
say, what about elevators? Don’t ride them at midnight. 

Mr. Davis. If you’re on an airline, that’s not very good news. 

Mr. Simpson. Well, that’s true. ITiere are traffic control systems. 
That’s a whole different ball game, yes. 

Mr. Davis. We will get you in the next round, thanks. 

Mr. Horn. I thank the gentleman from Virginia. He used 13 
minutes, so I’m delighted to yield 13 minutes to Mr. Kucinich, the 
f^Bking Democrat. We’re delighted to have him with us. 

Mr. Kucinich. Thank you very much, Mr. Chairmem. 

I would like to direct a question to Mr. DeSeve, since there has 
been discussion about the contact with the various States. I think 
it occurs to all of us that one of the significant functions of State 
government is to hold elections. The year 2000 is a Presidential 
election year. 
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Has anyone in the Government begun the task of assuring that 
all 50 States are going to have their election procedures in order 
so that we don’t end up with a constitutional crisis in the year 
2000 as a result of not being able to certify in any particular State 
the results of the Presidential election, not to mention election for 
Members of the Senate and the House? 

Mr. DeSeve. Those are the kinds of things we’ve been talking to 
both NASI and the National Association of Governors about — and 
the Federal Election Council is certainly aware of their need to pro- 
vide appropriate monitoring. I would be happy to get you more in- 
formation. I haven’t been involved personally in that, but I will 
have to get you more information about what we’ve been doing 
with both the State information officers, who have the primary 
technical oversight, as well as the Governor’s Association, which 
has involved in it the folks who would be running for reelection at 
that point. 

Mr. Kucinich. If it goes back to 1900, we could end up with 
McKinley again. 

Mr. Davis. If the gentleman would sdeld. We had a Republican 
Congress at that point. 

Mr. Kucinich. I’m focusing intensely on this. 

Mr. DeSeve. I’ve heard of jurisdictions which dead people could 
vote, but I think that’s carried a little bit too far. 

Mr. Kucinich. We’re not in Cook County. 

Mr. Horn. If the gentleman would 3 deld for 10 seconds. 

The problem isn’t the Presidential election. In 2000, people will 
have plenty of people to attack if they don’t do something to help 
us on this. 'The problem is the Iowa primary in January, the New 
Hampshire primeiry in February, and the regional South primary 
in March. This might well aifect the counts there. 

Mr. Kucinich. That’s a good point. 

The reason I bring up the election is that our choosing of our offi- 
cials is set up by the Constitution of the United States. When we 
go further down to the end of the game, we’re talking about the 
electors who need to cast their votes, and if they don’t have proper 
guidance, then it ends up a President could end up being chosen 
by the House of Representatives. I mean, there’s always all kinds 
of interesting implications. 

So what I would ask you to do, Mr. DeSeve, is to — with the per- 
mission of the Chair — is to provide a definitive report as to what 
is happening State by State to prepare for the year 2000’s elec- 
tions, as the chairman said, the primaries, general election, and 
State-by-State accounting from the Secretaries of State of the re- 
spective States as to their readiness, because I think that’s what 
we need. 

We need to know that the/re ready, and we need to know that 
their accounts can be effectively tabulated, and that there’s not 
going to be any question about the validity of those counts, because 
all — or, you know, in the alternative, we may need to go back to 
paper ballots for that election, which could get me real excited 
about some possibilities that were mentioned here earlier. But, you 
know, we have to know. Because if the computers aren’t going to 
work, we have to be ready with an alternative plan. 



87 


Mr. DeSeve. We will be happy to collect that information for Mr. 
Kucinich. 

Mr. Kucinich. It would be useful for the committee. 

Now, are there any particular tools, Mr. DeSeve, or resources 
that are needed for the agencies to meet the deadlines? I mean, do 
you have the resources which you need? Is Congress — ^you know, 
there has been discussion about an appropriation being made. Do 
you feel that — was that done in consultation with your office? Are 
you going to have the resources you need? 

Mr. DeSeve. Again, we’ve had good success in prior years. Fiscal 
year 1997, fiscal year 1998, we included a little over $1 billion in 
the President’s budget as well as a contingency fund. We’ve had 
good response from the House Appropriations Committee and from 
the Senate. The chairman assures us that that will continue, and 
that will give us the ability to do the work we need. We thank GAO 
for the work they’re doing in testing as well as the work the inspec- 
tors general are doing in testing. 

Mr. Kucinich. The FCC, for one, has indicated that there could 
be problems with the communications systems. They noted that — 
one report that I’ve seen specifically noted that there’s a risk of 
failures in local television stations that could lead to a failure of 
emergency alert systems, not to mention the broadcast itself. Do 
you have any information that would suggest whether or not the 
Nation’s broadcast systems may be at risk because of the Y2K 
problem? 

Mr. DeSeve. What we’ve done — ^you’ve just highlighted it — is 
we’ve asked the FCC to provide that coordinative responsibility in 
the sector in which they work. So the information you have is from 
the FCC about the current status, as well as their oversight and 
their regulatory function as they look at licensing and making peo- 
ple aware of the things that they have to do. The FCC is working 
very closely on this issue. They’re 1 of the 30 sectors that John 
Koskinen identified. And so the FCC has taken responsibility in 
this area. 

They’re assisted by other partners like the Department of Com- 
merce where we’ve got a lot of communication infrastructure that 
we work on, or in the Defense Department. But their word, the 
FCC’s word is the administration’s word in this area, by design. 

Mr. Kucinich. How about wireless communication at the local 
levels with respect to police, fire? 

Mr. DeSeve. We’ve met with representatives of chiefs of police, 
representatives of cities and counties to make them aware of what 
may happen and cause them to test their own communication sys- 
tems, whether wireless or 911 systems. They’re in the process of 
doing that now. 

I can’t give you a definitive report on that, but I think that may 
be a subject, as Mr. Davis indicated, for a hearing here to ask the 
local and State governments to come in and talk about how they’re 
doing. 

Mr. Kucinich. Have you set up protocols in terms of, one step 
at a time, how you solve a Y2K problem? You know, where do you 
begin? An analysis of their code? The — do you know, for example, 
that entire industries are affected out of hand? Then do you send 
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somebody in to analyze the code? Then do you hire a programmer 
to reprogram? What are the steps here? 

Mr. DeSeve. I think when we work, we start, again, within the 
Federal Grovemment. We start by inventorying the nature of the 
existing systems, determining which of those are mission criticsd, 
determining which of those are compliant, and begin the process of 
actually fixing the code or replacing the entire system — there sire 
some cases where it’s just better to replace the system — or chang- 
ing the way we do the function. 

Mr. Kucinich. Because when you fix the code, some of these, as 
it was with many systems, you have code that’s written specially. 
You have codes itered to deal with specific tasks. And so the re- 
engineering of those codes can be daunting, even without the pres- 
sure deadlines. 

Mr. DeSeve. That’s correct. And, as a result, in many cases, we 
make the decision to replace the system, rather than to repair it. 
Although, as we go further, there are cases where we find out that 
that’s not going to be possible. We literally won’t be able to replace 
it quickly enough. We don’t have enough assurance that what ex- 
ists out there is itself Y2K compliant. So we make a decision to 
move in that direction. 

We also then move into a phase once the work has been done 
and assessment of compliance or replacement has been put in place 
with the testing phase, and this is — ^these are not purely sequen- 
tial, but there would be some systems that are in testing while 
other systems are in remediation. The testing phase is desired to 
include independent bodies, independent verincation and validation 
groups, as well as the work of the inspectors general to make sure 
that the claims asserted are, in fact, correct. 

I appreciate GAO’s testimony that GAO found that the inspectors 
generaJ found that, in fact, some of the claims were not correct. 
That’s why we do the testing. That’s why we bring independent 
parties in. 

Finally, we then place those systems in operation and use them 
for a period of time following March 1999, which is the date that 
the systems are supposed to be in compliance and see how they 
work, make sure that they still work properly. So that’s it, that set 
of steps. 

Mr. Kucinich. As you identify step by step and you are able to 
certify that there is Y2K compliance, those personnel that have 
worked on that problem, are they then able to transfer over within 
the Government to other divisions so that they can help solve the 
problem? 

Mr. DeSeve. Yes, they are. We’ve tried to make the personnel 
rules as flexible as possible, and we’ve identified some of the pools 
of personnel and some of the agencies. 

DOD is doing it very effectively internally. Theyve got a series 
of teams, I’ve forgotten the number of teams, who are able to move 
from solution to solution. They’re not Army teams or Navy teams 
or Air Force teams, but they’re Defense Department teams, and 
the^re designed to move from problem to problem over time. The 
Defense Department has also indicated, to the extent that they get 
some surplus capacity, they will be happy to make that available 
to domestic agencies. 
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The Year 2000 Council led by the Social Security Administration 
is doing some of the same kind of work. 

Mr. Kucinich. Thank you very much. 

Thank you, Mr. Chairman. I yield back. 

Mr. Horn. I thank the gentleman for those very helpful ques- 
tions. 

Let me ask some general questions of all of you here, if I might. 

Mr. McCabe, you raised the question in your testimony regarding 
testing areas and the alarms that would raise. How long does it 
take to adequately perform tests or retests? 

Mr. McCabe. Mr. Chairman, generally in a project, it will take 
50 or 60 or 70 percent of the total effort dedicated to the testing. 
That’s the general guideline. In this particular case, there’s a real 
anomaly, and that is the people for good reason or concern with 
safety want to test thoroughly. 

The mistake being made, however, is that, as general testing, 
when the remediation is very specific to dates. And there are tech- 
niques that are now particularly being used whereby one can pin- 
point the number of date tests and then really focus on that. The 
good news, if there is any in all of this problem, is that the date 
is not that dense. The dates are t 3 T)ically between maybe 5 and 12 
percent of the line of code, and the number of tests specifically for 
the dates for the whole — within the whole system is likewise about 
maybe 10 percent of the total tests. 

So a mistake a lot of well-intended agencies and companies are 
making is testing all of the above, the whole system, when, in fact, 
there’s a whole lot less to test. So they are both testing too much. 
And then, if you look in the inside, they’re testing too little. Be- 
cause with the buckshot approach, the fact is you miss a lot of the 
core things and dates that you should be testing. 

Mr. Horn. Do you all agree with Mr. McCabe? 

I see Mr. Simpson nodding approval. 

How about you, Mr. Webster? 

Mr. Webster. Yes, I do. Testing is — ^this is an issue I’ve been in- 
volved in as well. It is challenging to come up with a test that exer- 
cises those portions of the code where the problems lie. Indeed, ev- 
erything Mr. McCabe has had to say about coverages is extremely 
applicable to the year 2000 problem. 

And my own observation and experience is that most firms tend 
to neglect testing. It is where they think to cut back or cut short, 
and it’s where the greatest risks are at. 

Mr. Horn. Mr. Steinberg. 

Mr. Steinberg. Well, I’d like to be able to agree, but in my an- 
cient experience as a programmer and my wife’s experience as a 
Y2K tester, you can’t depend on programmers to tell you where to 
put dates. So if you want to test dates, you have to test everything 
just to make sure you haven’t missed one. And that’s the unfortu- 
nate reality. 

Probably we still have to go with Mr. McCabe’s suggestion, be- 
cause it’s the only way we have, testing ever 3 d;hing to the best of 
our ability. But no matter what you do, we’re going to still miss 
dates and still have some failures, because we can’t test everything. 

Mr. Horn. Mr. Grabow. 
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Mr. Grabow. Yes, I agree. I would add that, as the time gets 
smaller and smaller, testing people will shrink the amount of test- 
ing they do just because of the finite date constraint. 

I would go on and say that when you go on to the productive ca- 
pacity and you look at a powerplant, to speak to Mr. Davis’ earlier 
question about the utility industry, be successful in a powerplant, 
there have been many failures that have been demonstrated al- 
ready. 

But to be successful, you have to do end-to-end system testing. 
So even though you identify particular segments or subsystems 
within a powerplant and you’re able to begin to fix them or reme- 
diate them, until you actually have the plant in a position to do 
end-to-end testing, you can’t be assured of the actual result. 

So, therefore, I think it’s very important that the time allowed 
for testing to be there and be available and what may occur, if fa- 
cilities are not remediated in time, they’re going to have to be shut 
off, as we come to this date, because of the concern of the outcome, 
quite frankly. 

So when you look at the electric utility industry — we have stud- 
ied this at great length, and we see that it’s very likely that we 
will have brownouts in this country, and possibly some intermit- 
tent blackouts, as we make the turn, only because if you look at 
the entire grid, there are — it’s basically an end-to-end system that 
has to be tested. 

There are 6,000 powerplants out there that all have to be reme- 
diated; and, unfortunately, as we look at the work from our anal- 
ysis, we don’t see that all that is being done in every case. To reme- 
diate a particular powerplant, it can take an 5 rwhere from 5 months 
to 12 months; and, in some cases, they’re still trying to determine 
that. So I think the testing is going to be very, very critical as we 
get into the end of this year. 

Mr. Horn. Dr. Stillman, your thoughts on testing, are they the 
same as Mr. McCabe’s and the other panelists? 

Ms. Stillman. I think yes and no. We agree in large measure. 
I’d like to clarify some things. 

There are lots of kinds of test tools, including the test tools Mr. 
McCabe has been working on for years called coverage test tools. 
I think they’re very useful in making sure that you test critical por- 
tions of the code. But no combination of test tools emd no combina- 
tion of testing approaches, such as stress testing, performance test- 
ing, or end-to-end testing, will guarantee you that you don’t have 
problems. 

So, especially in a situation like this where time is limited, each 
organization will have to assess its risks and determine what tests 
will be most effective eind what metrics it needs to determine how 
thorough its tests are. There is no one answer to doing that. It’s 
like any other complex problem. You can give a simple answer, and 
it’s usually wrong. 

Mr. Horn. Mr. DeSeve, any thoughts on testing? 

Mr. DeSeve. First, there’s always safety sitting next to Dr. 
Stillman and agreeing with her. And so I really would like to agree, 
and I would have said the same thing about the one size does not 
fit all. 
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But I think the independent validation, whether by an external 
consulting firm or a consulting firm, together with the IG is crit- 
ical. We need to have at least two pairs of eyes looking at this, 
whichever set of testing regimes is chosen within an agency. 

Mr. Horn. Now, the administration has picked one month as 
when they want testing to begin, and when do they want testing 
to end? 

Mr. DeSeve. Testing should be continuous as soon as the system 
is thought to be compliant. Testing should be part of that. 

So if you look at a vin diagram, it will be continuous; and all sys- 
tems are to be compliant by March 1999. Your point over here, the 
fin 2 d end of the hard work is March 1999, so we hope that that’s 
when the in-service testing, if you will, begins, when the formalized 
testing process gives way to in-service testing and use. 

Mr. Horn. In other words, you’re saying if everybody does most 
of the job by March 1999, we can have extensive testing in terms 
of government computers, and you feel the last three quarters are 
sufficient to do that? 

Mr. DeSeve. That’s why we actually moved — we advanced the 
date. There had been a later date. We actually under Frank Raines’ 
leadership advanced the date to give us that extra time to test. 
And it will be a real acid test of the agencies, how many meet the 
March 1999 date. That’s the one, like you, we’re very much focused 
on. 

Mr. Horn. Obviously, have you had any experience so far to 
know if the testing you’ve done in some of the areas, such as Social 
Security, how much time did they need to test after they had 
ascertained whether the code needed revamping, adjusting, what- 
ever you want to call it? 

Mr. DeSeve. I hate to be prolix, but it will really vary depending 
on the type of system. If you have a very large system, as Mr. 
McCabe testified, that it is not date dense then, as a result, it has 
no particulair problems. 

We tested an 0MB, for example, and because we have been run- 
ning our systems across the year 2000 for many budget years, we 
find a very high degree of our systems were compliant and could 
easily do it. 

As you might imagine, the smaller percentage, less thsui 3 per- 
cent of the systems where we’re going to have to annually update, 
we would have edways have to annu^ly update. 'These will be up- 
dated next March to take care of that problem. 

But then the question is, how do they run in the environment? 
We’re going to have to test their ability to run with other systems 
in departments eind agencies who use them. So the end testing 
comes in. 

So for a specific set of codes and the revamping, the testing can 
be very brief, but the in-service can take significantly longer, de- 
pending on how well our partners are able to handle the problem. 

Mr. Horn. Assuming something goes wrong and we don’t have 
enough time in three quarters or they don’t get to the position 
where they can test, does that mean contingency planning is a crit- 
ical need? If so, what is the administration’s approach on dealing 
with contingency planning where you might say, “the heck with the 
computer. We’re going to do something else”? 
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Mr. DeSeve. Contingency planning is indeed critical. And we’re 
working with GAO to develop the next level of their guidance, to- 
gether with ours, in contingency planning. But for completing busi- 
ness operations as well as an ^temative path, if you will, for the 
computer technology, we know that there will be a need for contin- 
gency planning. It may be something as simple as we have to wait 
an extra month or an extra 2 months to have something happen. 

If that’s not mission critical, if it’s not going to affect the econ- 
omy, that can be an easy choice along the way. But where it is mis- 
sion critical and it’s going to affect the economy, we’re going to 
begin in the next quarterly report indicating the nature of the con- 
tingency plans for both systems and for business operations. We 
rejdly care about business operations. 

So you will see in the September quarterly report the beginnings 
of the agencies reporting on their contingency planning. 

Mr. Horn. Now, when Dr. Raines came in, we had an agreement 
that we would use reprogrammed money to do as much of the job 
as we could. But, despite that, some appropriations subcommittees 
felt there was need for additional money beside reprogrammed 
money. And Mr. Kolbe’s subcommittee, which includes the Execu- 
tive Office of the President and 0MB, is putting appropriations 
money in there for not simply those offices but for the rest of the 
administration. 

What do you estimate the total cost will be on the Federal Gov- 
ernment? Do we have a figure on that? 

Mr. DeSeve. Our latest quarterly report contains a figure, in- 
cluding money already spent, of approximately $5 billion. Of that, 
about $3.4 billion will be spent through fiscal year 1998; about $1.3 
billion will be spent in fiscal year 1999, and about $300 million will 
be spent in fiscal year 2000. That should, if my arithmetic is good, 
add up to just about $5 billion. And that was all in our last quar- 
terly report. 

Mr. Horn. Now, with the predicted higher and higher costs for 
human resources as we get near the deadline, and some of your top 
people have already expressed the fact that they set up a center, 
they bring these people out of retirement, they train them for the 
job to be done, and the next thing they know is they’re gone, either 
to other FederzJ agencies. State agencies, or private corporations. 
What’s your feeling on the rising cost, just based on people? 

Mr. DeSeve. I think what we’ve seen so far is that the problem 
is very much like dealing with an older home, an older home is per- 
haps the best analogy. As we begin learning more about some of 
the systems in that older home, we find it becomes more expensive. 
When we didn’t have the wallboeird off, we didn’t know what was 
behind the wallhoard. So I think that no one is projecting that the 
costs will come down. 

As a result, in the President’s budget this year, we suggest that 
a flexible contingency be available for dealing with those unknowns 
as they come due. 

Mr. Horn. You listened to a lot of the testimony of the other 
panelists. Some of them were very pessimistic about the Federal 
Government’s prospects. What’s your view? 
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Mr. DeSeve. I hope I’m realistic. We’re very concerned, as you 
are, about what we call the tier 1 agencies. And we want to con- 
tinue to work very hard with them and to monitor what’s going on. 

The other thing I heard, I think, here today is that in terms of 
planning, the kind of process that we in this committee have had 
in place of oversight is probably as good as any eiround the world. 
That doesn’t guarantee success, but it does guarantee the kind of 
vigilance that you’ve given and the vigilance that the administra- 
tion has been trying to give. 

For the tier 2 ^encies and the tier 3 agencies, we feel fairly com- 
fortable in the tier 3’8. But we’re from Missouri, so we’re going to 
want to continue to test them in use. And the tier 2’s, they’re mak- 
ing progress, but we want to make sure that they continue to make 
progress. So, as a result, we will have monthly reports in the tier 
2’s, as weU as the tier 1 agencies. 

Mr. Horn. You mentioned a letter from the World Bank to var- 
ious member nations. And, as a result, there was no conclusive re- 
sponse from 65 countries, which was mentioned by you and others. 
>^at do you feel that reflects? Hiey just don’t understand it? 
Should we be worried? Because some of those computers might well 
be interacting with subsidiaries of American conwrations. How do 
you take that and what can we do or what should the administra- 
tion do to get them focused a little more on this? 

Mr. DeSeve. Yes, I think we’re continuing to work with our part- 
ners in the IMF, our partners in the World Bank, our partners in 
the G-8. There were a series of conversations at the G-8 bank ear- 
lier in the spring on these issues. I think it’s working along; with 
the Federal Reserve, with Mr. Greenspan and others continuing to 
raise awareness, whether it’s Mr. Simpson’s public awareness cam- 
paign or other campaigns, we believe vei^ strongly in that, and we 
encourage this committee to continue its focus to increase that 
awareness. 

Mr. Horn. Well, we wrote the Secretary General of the United 
Nations 2 yeeirs ago. He, presumably, was going to do something 
about it. Whether he has or not, I don’t know. 

Mr. Gorbachev contacted us. He was very interested in it. He 
talked to the Russian Government. He had the right approach. But 
then he just got sort of fed up when he couldn’t get much help from 
some of the people he WEmtea to get help from. 

So you’re saying the President has talked, or Treasury will tell 
us tomorrow, the degree with which they talked to the G-8 or 
whatever it is now? 

Mr. DeSeve. And the President, along with Mr. Blair and others 
at the G-8, had a series of colloquies that resulted in a series of 
statements. I will be happy to give you those in addition to what 
the Secretary of State has done and others. 

[The information referred to follows:] 
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FACT SHEET 

The C-8 Blrwlnghaw Smmlt 
"Securing the Benefits of Integration* 


At Blmlnghaa, president Clinton advanced his strategy of 
securing the benefits of global integration by naking sure these 
benefits are shared nore widely aaong the Anerican people and 
within all peoples in all regions. Following the econonic and 
political discussion on Friday and the progress made on fighting 
transnational crime on Saturday, President Clinton led the 
discussion on how to move forward on several key global 
challenges of the 21st century: promoting sustainable 
development, particularly through trade, political and economic 
reform, and targeted debt relief; protecting the global 
environment; and combating the spread of infectious diseases. 

The Leaders also discussed the difficult challenge of the Year 
2000 Bug, and pledged to work together, and with industry, to 
address it. 

Development; Africa 

Promoting integration, reform and targeted debt relief 

President Clinton led the discussion on Africa which continued 
and bviilt on those at the Lyon and Denver Summits. Encouraged by 
the progress being made by some countries in Africa during bis 
recent trip to the Continent, the President pushed for more 
effective support for indigenous efforts to build democracy, good 
governance and a stronger civil society. 

Countries Emerging from conflict: recognixlng that poor nations 
emerging from conflict have special needs -- for rebuilding 
political economic and social institutions in a manner consistent 
with democratic values and respect for human rights — the 
Leaders agreed that strengthening the local ability to prevent 
and ease conflict is also integral to Africa's development. 

The World Bank and multilateral institutions were called upon to 
play a special coordination role in these efforts. Leaders also 
agreed on the critical importance to the reform efforts of 
developing countries of replenishing the soft loan window of the 
African Development Bank and the new resources for the IMF's 
Enhanced structural Adjustment Facility, along with delinking 
development bilateral assistance. 

Debt Relief: Relieving the debt burden of the poorest countries' 
continues to be a priority for President Clinton. To promote 
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develop«ent, laprov« the quality of life and foster integration 
into the global economy, the Leaders pledged their support for 
the current initiative to eliminate up to 80\ of the debt for 
needy countries that have undertaken bold economic reforms. They 
encouraged all eligible countries to join the initiative by the 
year 2000. To support these countries initial reform efforts, 
the President pushed the other Leaders to work with the 
international financial institutions (IFZ) to cover debt service 
payments and to forgive poor countries' bilateral debt. 

Infectious Diseases: Also following on last year's Denver summit 
discussions. Leaders agreed to enhance their cooperation to fight 
infectious and parasitic diseases. President Clinton and Prime 
Kinlster blair led the g- 8 In voicing support for the VffiO's "Roll 
Back Malaria" campaign to significantly reduce the death rate 
from malaria. The 0-8 Leaders expressed their continued support 
for UMAIDS' efforts to fight the spread of HIV/AIDS, and agreed 
to pursue efforts to prevent and treat AIDS. 

Protecting the Global Environment: climate Change and Forests 

Climate Change: Birmingham narked an important shift in efforts 
by industrialized nations to work together to address the 
challenge of climate change. The Eight agreed to elements of a 
common approach on "the work that is necessary to ratify Kyoto" - 
- an important step forward on building a globally solution to 
this global problem. In the past, industrialized nations have 
different on how best to address climate change. Yesterday, the 
Eight Leaders spoke of the significant domestic steps they are 
each taking to address climate, and together recognized the need 
and difficulty of building a global system to address this 
problem, officials from G-8 governments will meet to make 
progress on these issues prior to the next climate change 
negotiating round, which will be held in Buenos Aires this 
November . 

The Eight agreed on the need for cooperation in two key areas. 
First, they pledged to develop effective rules and principles for 
market-based emissions trading and other flexibility mechanisms 
to "ensure an enforceable, accountable, verifiable, open and 
transparent trading system." Significantly, the Bight also 
agreed to work as a group with developing nations to secure 
participation and commitments from all nations. Recognizing that 
this is a critical step needed to make Kyoto a reality — 
especially since developing nations are likely to be most 
effected by climate change, that these nations' share of 
emissions is growing, and that coamltments must be tailored to 
these nations' considerable development needs. 

leaders also endorsed a G-S Forest Action program, committing 
themselves to reporting on eoncrcte steps to protect forests at 
home and in developing nations. They also discussed the 
importance of establishing eommon environmental guidelines for 
export credit agencies — such as those adopted by the U.s. 
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Export-Import Bank — but were unable to reach agreement on 
common standards. 

Employability 

the LEaders also focused on enhancing opportunities for workers 
to make sure nobody falls through the cracks during this tine of 
global integration. President Clinton underscored the Importance 
of strong, sustained macroeconomic growth as a means to bring 
more people into the work force and help raise living standards 
for all people. Over the past five years, America's strong, 
sustained economic expansion has helped lower unemployment to 
record dows for disadvantaged groups and raise the incomes of the 
poor. 

President Clinton highlighted the success of the Earned Income 
Tax Credit (EITC) in making work pay and providing strong 
incentives for work over welfare. In particular, he noted recent 
research chat shows that the EITC lifts more Chan 4 million 
people out of poverty each year and encourages single mothers 
with children to enter Che work force. 

The Leaders also renewed their support for global progress 
towards the implementation of internationally recognized core 
labor standards. In particular, they emphasized support for the 
adoption of the ILP declarations and implementation mechanisms of 
core labor standards at the ILO ministerial next month and the 
collaboration between the ILO nd HTO in carrying forth this 
agenda . 

Tear 2000 


The Leaders discussed the urgent need to coordinate efforts to 
deal wltb the international challenge of the Year 2000 computer 
problem. President Clinton raised this issue as one of the 
premier challenges at the beginning of the next two years, and 
discussed the U.S. effort to address the Issue. The Eight agreed 
to work with the private sector and organizations working In the 
areas of defense, transport, telecoaaunieatlons, financial 
services, energy and the environment to solve the problem and 
prevent potential disruption. 
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G8 BIRMINGHAM SUMMIT 
15-X7 HAV 1998 
COMMUNIQUE 


Introduction 

1. We« the Heads of State or Government of eight major Industrialised democracies and 
the President of the European Commtssjan^ met In Birmingham to discuss issues aReding 
people In our own and other oountites. Ina world of Increasing globalisation we are ewer 
more interdependent Our challenge b to build on and sustain the process of globalisation 
and to ensure that its beneilte are spread more widely to Improve the quality of life of 
people everywhere. We must also ensure that our Institutions aryj strudures keep pace 
with the rapid technological and economic changes under way in the world. 

2. Of the major challenges fedng the world on the threshold of the 21st century, thb 
Summit has focused on three: 

- achieving sustainable eoonomie growth and development throughout the world in 
a way whkh, whOa safeguarding the emdronment and promoting good 
govematKe, will enable developing co u n t rie s to grow fester and reduce poverty, 
restore groi^ to emerging AAan economies, and sustain the Pberalisation of 
trade In goods and servloas and of investment in a stable Intemabonal economy; 

- buildbig lasting grewlh In our cam economies In which all can partidpate, oeab'ng 
jobs and comtottng sodal e cd u slo n ; 

• tadding drugs and transnaHonai crime which threaten to sap this growth, 
undarmbia ^ rub of law and dantage the Pwes of Individuate In all countries of 
thcvmrlCL 

Our aim in each case has bean to agree concrete acttons to tadde these challenges. 
Pmintelimau^alniihteoiawtetettieidiihNefanim^ 

3. inanlnterdepeiKtentwotld, vsemustworktebullds us talnab b ecotwnilcgrowlhinan 
oounbbs. GbbaHntagratbn'b a pmoaasvet have emuragad and shaped and which is 
producing dear benaOts fer paepb throughout the worid. We weloemed Ihe historic 
ded s iora taken on 2 May on the cstaMbhraentoT Banpean Economic and Monataiy Union. 
We look ferwanj to a aucoesilU BW wNdi oonMbutea to the haallh of lha world 
coonomy. The comml tn ia nt In Eu ropean Uwton courrWes to sound ilscal poBcbs arid 
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continuing structural reform is key to the long-term success of EMU, and to improving the 
prospects for growth and employment. 

4. Overall global prospects remain good. However, since we last met; the prospects have 
been temporarily sec back by the Hnaneial crisis in Asia. We confirm our strong support 
for the efforts to re-establish stability and growth In the region and for the key role of the 
International Rnandal Institutions. Successful recovery In Asia will bring important benefits 
for us all. Therefore: 

- we strongly support reforms underway in the affected countries and welcome the 
progress so far achieved. WHh full Implementation of programmes agreed with 
the IMF we are confident that stability can be restored. The underlying Actors 
that helped Asia achieve Impressive growth In the past remain in place. 
Implementation of agreed poOdes together with the action taken by ourselves and 
other countries to avoid splllower effects provide the basis tor a firm recovery in 
the region and renewed global stabilliy: 

- we believe a key lesson from events In Ada Is the importance of sound economic 
policy, transparency and good governance. These improve the functioning of 
financial markets, the quality of economic policy making and public understanding 
and support tor sound policies, and thereby enhance confidence. It is also 
Important to ensure that the private sector plays a timely and appropciabe rale in 
crisis resolution; 

• we are cansdous of the serious impact of the crisis In the region on the poor and 
most vulnerable. Economic and flnandal reform needs to be matched actions 
and polldes by the countries oonoerned to help protect these groups ftom the 
worst effects of the crisis. We wdcome the support tor this by the World Bank, 
the Aslan Dewektpment Bank and btlateral donors and the Increased emphasis on 
sodal expenditure In programmes agreed by the IMF; 

- we are concerned that the dunculttes could trigger short-term protectionist forces 
both In the leglan and in our own countries. Such an approach would be highly 
damaging to the prospects tor recovery. We resolve to keep our own markets 
open and cal on other courtbriesto do the same. We emphasise the Importance 
for the affected countries of continued opening of their markets to investment and 
trade. 

5. LooMng ahead to the WTO's oelebratian of the 50th anniversary of the founding of the 
GATT next week, we; 

- reaffirm our strong commlbnent to continued trade arxl InvestmerA liberalisation 
within the mUtilatBral framework of the WTO; 

- call on all countries to open their markets further and resist protecUonlsm; 
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- strongly support the widening of the WTO's membership in accordance with 
establi^ed WTD rules and practices; 

- agree to pramoCe public support Ibf bie mulUlateral system by encouraging 
greater transparency In the WTO< as In other international organisations: 

- reaffirm our support for effbits to complete existing multilateral commitments, 
push forward the built-in agenda and tackle riew areas In pursuing broad-based 
multilateral libeialisation; 

- confitm our wish to see emerging and developing economies partidpaCe fully and 
effectively In the multilateral trade system; commit ourselves to deliver early, 
tangible benefits from this participatian to help generate growth and alleviate 
poverty in these oountries; anti undertake to help least developed countries by: 

• providing additional duty-free access fbr their goods, if necessary on an 
autonomous basis, 

• ensuring that rules of origin are transparent, 

• assisting efforts to promote regional Integration, 

• helping their mark^ become more atbactive and accessible to investment 
and capital flows. 

6. The last point highlights otra of the most difficult challenges the world faces; toenable 
the poorer dewefoplna oountries, espedally In Africa, develop their capadUes, Integrate 
better Into the global economy arid thereby benefit from the opportunities offered by 
globalisation. We are encouraged by the new spirit of hope and progress In Africa. The 
challenges are acute, but oortfidenoe that they can be overcome is growing. We commit 
ourselves to a real and effective partnership in support of these countries' efforts to reform, 
to develop, and to reach the (nbrnratlonalV agreed goals for economic and sodal 
deveiopni^ as set out In the oeciys 21* Century Strategy. We shall therefore work with 
them to achieve at least primary education for children everywhere, and to reduce 
drastically child and maternal mortality and the proportion of the world's population living In 
extreme poverty. 


7. To help achieve these goals, we Intend to Implemant fully the vision we sec out at Lyon 
and Denver. We therefore pledge ourselves to a shared International effort: 

- to provide effective support for the efforts of these oounbles to buHd democracy 
and good govemanoe, s tronger cMI socMy and greater transparency, and to lake 
action against corruption, for example by malting every effort to ratl^ the OECD 
Anti-Bribery Convention by the end of 1998; 
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to recognise the Importance of substantial levels of development assistance and to 
mobilise resources for development In support of reform programmes, fulfilling our 
responsiblltb'es and In a spirit of burden-sharing, including negotiating a prompt 
and adequate replenishment of the soft loan arm of the World Bank (lOA 12) as 
well as providing adequate resources for the Erihanced Stnictural Adjustment 
Fadlitv of the IMF and for the African Development Fund; 

to work to focus existing bilateral aid and investment agency assistance in support 
of sound reforms, including the development of basic social infrastructure and 
measures to Improve trade and Investment; 

to work within the OEOS on a recommendation on untying aid to the least 
developed countries with a view to proposing a text In 1999; 

to support the speedy and determined eMenston of debt relief to more countries, 
within the terms of the Heavily Irvtebted Poor Countries (HIPC) Initiative agreed 
by the International Hnandal Institutions (IFIs) and Paris aub. We welcome the 
progress achieved with sfac oounbies alrea^ declared eligible for HIPC debt relief 
and a further two countries Utoty to be dedared shortly. We encourage all eligible 
countries to taka the policy measures needed to embark on the process as soon as 
possible, so that all can be In the process by the year 2000. We will work with the 
international Institutions and other creditors to ensure that when they qualify, 
countries get the relief they need, irtduding interim relief measures whenever 
necessary, tn secure a lasting exK from their debt problems. We expect the World 
Bank to Join ttw future flnanclal effort to help the AfVIcan Development Bank 
finance Its contribution to the HIPC Initiative: 

to call on those countries who have not already done so to forgive aid-related 
brtateral debt or take comparable acdon for reforming least developed countries; 

to enhance mutual cooperaUan on infectious and parasitic diseases and support 
the World Health Organisation’s tfforts In those areas. W« support the new 
Initiative to 'RoS Back Malaria’ to relieve the sulferlng egqjetlen^ by hundreds of 
milflons of people, and dgntflcanUy reduce the death rate from malaria by 2010. 
we wW also continue our efforts to reduce the global scourge of AIDS through 
vaccine devekipment, preventive programmes and appropriate therapy, and by 
our oonUmied support for UNAIOS. We welcome the French proposal for a 
’Therapeutic SoActarKy IniaaOve’ and other proposals for the prevention and 
treatment of AIDS, and request our experts to examine speedily the feasibility of 
their Implementatfan. 
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8. We see a particular need to strengthen Africa's ability to prevent and ease conflict, as 
highlighted in the UN Secretary General's recent report We twill look for ways to enhance 
the capacity of Africa-based Institudons to provide training in conflict prevention and 
peacekeeping. We also need to consider further ways to respond to the exceptional needs 
of poor post-conflict countries as they rebuild their f^lUcal, economic and social systems, 
in a manner consistent with democratic values and respect for basic human rights. In 
addition to immediate humanitarian assistance: 

- we recognise the need for technical and financial assistance in creating strong 
democratic and economic institutions, supporting good governance alongside 
programmes of macroeconomic and structural reform supported by the IMF and 
World Bank. We call on the World Bank to play a stnong role in co-ordinating 
bilateral and multilateral assistance in these areas; 

- we also agree on the need to consider ways for debt relief mechanisms, including 
the HIPC initiative where appropriate, to be used to release more and earlier 
resources for essential rehabilitation, particularly for those countries with arrears 
to the IFls. 

9. A crucial factor in ensuring sustainable development and global growth Is an efficient 
energy market We therefore endorse the results of our Energy Ministers' Meeting In 
Moscow in April. We shall continue cooperation on energy matters In the G8 framework. 

We recognise the importance of souridly based political and economic stability in the 
regions of energy preducUon and transit With the objective of ensuring reliable, economic, 
safe and environmentally-sound energy supplies to meet the prcg'ected Increase in demand, 
we commit ourselves to encourage the development of energy markets. Liberalisation and 
restructuring to encourage efficiency and a competitive environment should be supported 
by transparent and nort-dlscrtmlnatory national legislative and regulatory frameworks with a 
view to establishing equitable treatment for both government and private sectors as well as 
domestic and foreign entities. These are essential to attract the new Investment which our 
erxergy sectors need. We also recognise the Importance of International co-operation bo 
develop eoanomica(ly viable International energy transmission nehMorks. We shall pursue 
this co-operation btlaberally and muiUlateraliy, including within the framework and principles 
of the Energy Charter Tre^. 

10. Considering the new compotittve pressures on our electric power sectors, we reaffirm 
the commitment we made at the 1996 Moscow Summit to the safe operation of nudear 
power plants and the achievement of high safety standards wortdwide. and attach the 
greatest Importance to the foil implementation of the Nudear Safety Account grant 
agreements. We realUrm our commitment to the stated mission of the Nudear Safety 
Working Group (NSW6). We agreed to deepen Russia's role in the activities of the N^G, 
with a view to eventual foil membership In the appropriate drcumstarKes. We 
acknowledge successful oooperatian on the pilot projax of the International Thermonudear 


s 



Experimental Reactor ([TER} and mnsider it desirable to condnue Intemadonal cooperation 
for civil nuclear fusion development 

11. The greatest environmental threat to our future prosperity remains climate change. 
We confirm our determination to address It and endorse the results of our Environment 
Ministers' meeting at Leeds Casde. The adoption at Kyoto of a Protocol with legally binding 
targets was a historic turning point In our efforts to reduce greentiouse gas emissions. We 
welcome the recent signature of the Protocol by some of us and oonfirm the Intenb'on of 
the rest of us to sign it within the neat year, and resolve to make an urgent start on the 
further work that is necessary to radiy and make Kyoto a reality. To this end: 

- we will each undertake domestically the steps necessary to reduce signilicantly 
greenhouse gas emlssloris; 

- as the Kyoto protocol says, to supplement domestic actions, we will work further 
on flexible mechanisms such as International market-based emissions trading. Joint 
implementation and the dean development mechanism, and on sinks. We aim to 
draw up rules and prindples that will ensure an enforceable, accountable, 
verifiable, open and transparent trading system and an effective compliance 
regime; 

- we will work together and with others Co prepare for the Buenos Aires meeting of 
COP4 this autumn. We wilt also look at ways of wortdng with all countries to 
Increase global partidpatian In establishing targets to limit or reduce greenhouse 
gas emissions. We will aim to reach agreement as soon as possible on how the 
dean development mechanUm can work, Induding how K might best draw on the 
experience and expertise of existing Institutions, Induding the Global Envirenment 
Fadlity. We look forward to Increasing partidpation from developing countries, 
which are likely to be most affteted by dImate change and whose share of 
emissions Is growing. We will work together with developing countries to achieve 
voluntary efforts arxl commitments, appropriate to their national droumscances 
and development needs. We shall also enhance our efbits with developing 
countries to promote technologic^ development and dlfluslon. 

12. The recent devastating forest flr^ In south-east Asia and the Amazon, threatening not 
only our environment but even economic growth and political stablRty, Illustrate the crucial 
ImportarKe of global cooperation, and of better and more effective frameworks and 
practical efforts designed to sustainably manage and conserve forests. In the year 2000 
we will assess our progress on implementatfon of the G8 Action Programme published last 
week. We strongly support the ongoing wofk on forests under the auspices of the United 
Nations, and we look forward to oontinulng these efforts. 
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Growth. emutovabBHv. and InHiwinn 

13. All our peopio, men and women, deserve the opportunity bo contnbute to and share in 
nadonal prosperity through work and a decent standi of living. The challenge Is how to 
reap the benefits of rapid bechnotogical change and economic globalisation whilst ensuring 
that all our dtiaens share In these benefits by mereasing growth and Job creation, and 
building an Indusiwe sodaty. To accomplish this, we recognise the Importance of 
modernising domestic economic and sadal structures within a soutmI macro-economic 
framework. To these ends we strongly endorse the seven pilndples agreed by the G8 
Finance, Economic, Labour and Emplayment Ministers attheir London Conference in 
February on ‘^Growth, Employability arxl Indusion*. We also weloome the condusions of 
the Kobe Jobs Conf^rice of November 1997, with their particular focus on active ageing. 

14. We discussed and welcomed the Action Plans we have each produced to show how the 
seven prindplas of the London Conflerenca are being Implemented. By sharing national 
experiences and best pracbces In this area, we can Improve our pondes and responses. 

We underfined the Importa n ce of the Involvemant of employers and unions In securing 
successful Impleme n tation of these Plans. 

15. The Action Plans show that iiyfividually we are all maldng n^ commitments to 
Improve empioyablllty and Job creation in our countries. In particular, we have committed 
ourselves to: 

- measures to help young, tong-term unemptoyed and other groups hard hit by 
urwmployment And work; 

- measwes to help entrepreneurs to set up oompanies; 

- carrying out structural reforms. Including making tax and benefit systems more 
employment IHencHy and liberalisation of product markets; 

• measures to promote IMarig learning. 

16. Each country confirmed Its determination tB httroduce the measures set out In Its 
Action Plans and as pursue the concept of active agefiig. Measures on acdve ageing should 
explore what Ibrms of work are appropriate b) the needs of aider workers and adapt work 
ta suK them aoDonfinghr. 

17. These measures wfilhalp geneiafas soundhr-basad and aquftafale growth. We are also 
wfiRng ta share our prl n dpl M and •cpcrienocs, inchidbig In the relewant intemaUanal 
brSl i bitlons pertkulatly the ILO. OECD and the ms, to help Ibster growth. Jobs and 
Indusion not ordy bi the GB but throughout the world. We renew our supSDtfcfor global 
pregrees towards the bnptamernatten of Inoin rationally reoogniserl cere lafaorrr standards, 
indudbigoonfinuod mBrihramnn be t wee n the HO and WTO s e cretariats In aoocrd a n ce - with 
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the conclusions of the Singapore conference arKl the proposal for an ILO declaration and 
Implementation mechanism on these labour standards. 

Combaano drugs and International crime 

18. Gtobalisabon has been accompanied by a dramatic Increase in transnaUonal crime. 

This takes many forms, Induding trafflcUng In drugs and weapons; smuggling of huinan 
beings; the abuse of new technologies oa steal, defVaud and evade the law; and the 
laundering of the proceeds of crime, 

19. Such crimes pose a threat not only to our own dbzens and their oommunlbes, through' 
lives blighted by drugs and sodedes living In fear of organised crime; but also a global 
threat which can undermine the democratic and economic basis of societies through the 
Investment of Illegal money by inbematlonal cartels, corruption, a weakening of Institutions 
and a loss of confiderKe In the rule of law. 

20. To fight this threat. International cooperation Is indispensable. We ourselves, 
particularly since the Lyon summit in 1996, have sought ways to Improve that cooperation. 
Much has already been achieved. We acknowledge the work being done In the UN, the BJ 
and by other regional groupings. We weloome the steps undertaken by the G8 Lyon Group 
to implement its 40 Recommendations on transnaUonal organised crime and the proposals 
G8 Justice and Interior Ministers announced at their meeting in Washington last December. 
By working together, our countries are helping each other catch criminals and break up 
cartels. But more needs fas be dona. There must be no safe havens either for criminals or 
for their money. 

21. We have therefore agreed a number of further actions to tackle this threat more 
effectively: 

• We fully support efforts bo negotiate within the next two years an effective United 
Nations conyention against transnational organised crime that will provide our 
law enforcement authorities with the additional tools they need. 

. We agree to Implement rapidly the ten principles and ten point action plan agreed 
by our 'MInistars on high tech crime. We for dose cooperation \n8th industry 
to reach agreement on a legal ftamework for obtaining, presenting and preserving 
electronic data as evidence, whfle maintaining appropri^ privacy proteMon, and 
agreements on sharing evidence of those crimes with International partners. This 
will help us combat a wide range of crime, including abuse of the Internet and 
other new technologies. 

■ We welcomed the FATF dedstan to continue and enlarge its work to combat 
money-laundering In partnership wkh regional groupings, we place spedal 
emphaHs on the Issues of money laundering arxl Bnandal crime, Indudlitg issues 
raised by offshore finandal centres. We wetcome the proposal to hold In Moscow 




in 1999 a Ministerial meeting on oombating transnational cnme. we agreed to 
establish Financial Intelligence Units (FIUs) where we do not already have them. 

In line with our national constitutions and legal systems, to collect and analyse 
information on those engaged In money laundering and liaise with the equivalent 
agencies in partner countries. We agreed on principles and the need for adequate 
legislation to fadllCate asset eanfiscatian (inom convicted criminals. Including 
ways bo help eadi other trace, freeze arid confiscate those assets, arid where 
possible, in acoordatKe with national legislation, share seized assets with other 
nations. 

We agree on the need to eiqilore ways of combating offidal corruption arising 
from the large flows of criminal money. 

We are deeply ooncemed by all fbrms of tramcfclng of human beings Including 
the smuggling of migrants. We agreed to Joint action to combat trafflddng in 
women and children, including efforts to p r e v e nt such crimes, protBct victims and 
prosecute the battkiars. We commit ourselves bo develop a multldisdpllnarv and 
comprehensive strategy. Including principles and an action plan for future 
cooperation amongst ourspives and with third countries. Including countries of 
origin, transit and destination, to tadde this problem. We consider the future 
comprehensive UN organised crime convention an important Instrument for this 
purpose. 

- We endorse Joint law enforcement action against organised crime and welcome 
the cooperation between competent agendes In tadding criminal networks. We 
agree to pursue further action, particularly In dealing with major smuggling routes 
and targeting spedfle forms of fbiandal fraud. 

■ We endorse the Lyon Group's prindples and action plan to combat illegal 

manufricturtng and trafflddng of firearms. We welcome Its agreement to work 
towards the elaboration of a binding International legal instrument in Che context 
of the UN transnational orgartised crime convention. 

22. We urge the Lyon Group to Intensify Its on-goIng work and ask our Ministers to report 
back to our next Summit on progress on the action plan on high tech erime, the steps 
taken against money laundering and the Joint action on oafflddng In human beings, we 
also welcome the sc^ agreed by our Environment Ministers on S April to combat 
cnviranmenCal crime. 

23. There is a strong Hnk between drugs and wider International and domestic crime. We 
welcorrre the forthcoming UNGASS on drugs. This shoidd signal the international 
community's determination In fovour of a comprehensive strategy to tadde all aspects of 
the drugs problem. For Its part; the G8 is u u umiltted to partnership and shared 
responsibility In the international oommunlty to combat nndt drugs. This should Indude 
reinforced cooperation to curb Illicit traffidd^ in drugs and chemical precursors, action to 
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redoce demand in our countries/ including through policies to reduce drug dependency, and 
support for a global approach to eradicating Ullctt crops. We welcome the UNDCP's global 
approach to eSmlnaUng or significantly reducirrg illicit drug production, where appropriate 
through etfecdve alternative development programmes. 

Non-Prolifera tion and Brnort Controls 

24. The proliferation at weapons of mass destruction and their delivery systems threatens 
the security of every nation. Our countries have been in the forefront of efforts to prevent 
proliferatkin/ and we have worked dosety togdher to support international non- 
prariferaUon regimes. We pledge to ^bnue and strangthen this co-operation. As a key 
element of this oo-operaOc^ we reaffirm our commitment to ensure the effective 
Implementation of export controls/ in keeping with our undertaUngs within the tron- 
prollferatkin regimes. We will deriy any IdrKi of as s ista nce to programmes for weapons of 
mass destruction and their means of delivery. To this end, we wHI where appropriate 
undertake and encourage the strengthening of laws, regulations and enforcement 
mechanisms. We will likewise enhance amongst' ourselves and with other countries our 
co-operation on expart.oontraf, including for rnstartoe on the exchange of Information. We 
will ask our experts to focus on strengthening e:gibtt conbol Implementation. And we vrill 
broaden awareness among our industrial and budness communities of export control 
require m ents.. 


Year 2000 Bug 

25. The Year 2000 (of HUIennlum) Bug probteni, derhdng from the way computers deal 
with the diange to the year 2000, preset mqjor c h al l ei^e s ta the International 
community, with vast implications. In pardeular In the de fe nc e , tnnspoit, 
telecommuriieatlocts, flrandal services, energy and enwlranmental sectors, arxi we noted 
the vital dependence of some sectors CXI others. We agreed ta taka forther urgent action 
and to share Informatkxi, among ourselves and wNh other s, IhA wHI assist In prevenbng 
disruptian In the near and longer term. We shall (Nork des^ wHh business and 
cxganbaHons working In diosc sectors, who wU bear much ^ the lespcxislbllity to address 
the problem. Vife wM work together In I n ternational otganisalions. such as the World Bank 
to assist developing countries, and the OGCD, to help solve this crtticai technoiogical 
problem and prepare for the year 2000. 

ffertSiiffiiiilt 

26. We a ccepted the kivttatlon of the Chanceftof of the Fedewi-Rapublic at Germany to 
meet again i««dtyear.in KBIrvcm 18-20 June. 


17 May 1998 


re 
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For Immediate Release Contact: Jack Gribben 

June 26, 1998 (202) 4S6-7010 


STATEMENT OF JOHN KOSKINEN 
Assistant to the President and 
Chair, President’s Council on Vear 2000 Conversion 


I am very pleased with today’s United Nations vote adopting the resolution on the year 
2000 problem. It is an important step in our efforts to increase awareness of Y2K outside of the 
United States and to encourage other nations to take immediate measures to address the problem. 

Y2K is a global challenge that highlights the growing importance of information 
technology in the daily exchanges between countries. It is crucial that all nations work to reduce 
the risk of system failures in key areas such as telecommunications, banking, and transportation, 
where failures in one country could significantly affect the world community. The President’s 
Council on Year 2000 Conversion is committed to continuing its work with our international 
partners to raise awareness and share information on this important issue. 

I would like to thank Ambassador Richardson, Ambassador Sklar, Ambassador Kamal of 
Pakistan, and the UN Informatics Working Group, with whom I was pleased to work on the draft 
of the proposed resolution, for their efforts, and I look forward to continuing an active dialogue 
with the United Nations on the year 2000 problem. 


unit 
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FOR RELEASE UPON DELIVERY USUN PRESS RELEASE #112-(98) 

CHECK TEXT AGAINST DELIVERY JUNE 26, 1998 

Statement by Ambassador Richard Sklar, United States 
Representative for United Nations Reform and Management, on the 
Resolution on the Global Implications of the Year 2000 Problem, 
in the General Assembly, June 26, 1998 


Mr. President, I am pleased to express the United States' 
support for the resolution on the global implications of the 
year 2000 problem. 

In a world vastly dependent upon electronic systems for the 
processing and exchange of financial and other data, it is 
imperative that nations address the year 2000 problem now. 

Those which fail to do so risk serious disruptions to critical 
business and government functions. And with the inflexible 
December 31, 1999 deadline fast approaching, there truly is no 
time to waste. 

This is an international problem that has implications for 
every nation. More than any other technological challenge we 
face, the year 2000 problem highlights the interconnectedness of 
today's world. Year 2000-related system failures in key areas 
such as international telecommunications, banking and 
transportation in any one country could have significant effects 
on many other countries. Nations need not only to address the 
problem within their own borders but to share information and 
expertise on possible solutions internationally. The need for 
this kind of cooperation was one of the key reasons we worked 
hard to raise the issue at the recent Birmingham G-B summit, and 
were so pleased to work closely with the UN Informatics Working 
Group on the year 2000 resolution. We also look forward to the 
elaboration of Guidelines for Member States to be set forth by 
ECOSOC at its upcoming substantive session. 

The resolution recognizes that the problem affects more 
than just large mainframe systems. Electronic devices with 
date-sensitive microprocessors, or embedded chips, are also at 
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risk. Uncheckedi this so-cailed ^'growth industry" of the 
problem has the potential to cause failures in everything from 
manufacturing equipment to traffic signals. We believe that, in 
addition to system challenges, countries need to pay close 
attention to this important aspect of the year 2000 problem. 

We also encourage every nation to examine its year 2000 
readiness, and not just in governmental systems. Government 
officials should be making inquiries on the status of 
preparations in the private sector, especially with regard to 
key infrastructure areas including energy, telecommunications, 
transportation and financial institutions. Member States should 
appoint national year 2000 coordinators. We have already done 
so. A coordinator can help countries to raise awareness of the 
problem among public and private sector organizations. 

Finally, we encourage every nation to think about 
contingency plans for critical business processes as we move 
toward the new millenium. By this fall, we will have reached a 
point where, despite all of the best efforts to prepare, some 
systems for which no year 2000 remediation efforts have begun 
will not be ready by January 1, 2000. we encourage nations to 
develop contingency plans for those critical business processes 
that are most at risk of experiencing failures. 

I would like to thank Ambassador Kamal and the Informatics 
Working Group for all their hard work on this important 
resolution and for raising the level of awareness of the year 
2000 problem generally within the United Nations. 


Thank you Mr. President, 
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Fifly-second session 
Agenda item 95 (c) 


Macroeconomic policy questions: science and technology for 
development 

Pakistan: revised draft resolution 

Global implications of tb* year 2000 date conversion problem of computers 

The Oenerel Assembly, 

Reco^nitm^ that the effective operation of Governments, companies and other 
organizations is threatened by the year 2000 date conversion problem of computers, or 
"millennium bug". 

Underlining the need for effective action to address ihe problem to be taken well in 
advance of the inflexible date of 31 Oeceenber 1999. beyond which important systems might 
cease to function. 

fiecognizing die potentiaJly serious impact that the year 2000 problem could have in 
all countries whose econonies arc increasingly inierdependent. 

Emphastsing that the year 2000 problem could alfect both computer systems and much 
electronic control equipment containing embedded chips and internal clocks, with wide- 
ranging effects on such important areas as power supplies, telecommunications, financial 
systems, iranspon. public health, building and factory systems, food supplies, emergency 
services, the organization of social welfare and utilities. 

Emphasizing also that coordinated efforts b) Governments and private, public and 
inicrnational organ(7.a(iort^ ere required to address the year 2000 problem. 

Appreciciing the establishment of a Trust Fund by the World Bank to assist in the 
efforts to resolve the year 2000 problem and the voluntary contributions made to it by the 
member States. 

Appreciaung (he efforts of the Ad Hoc Open-ended Working Group on Informatics 
of (he Economic and Social Council in raising the level of awareness of the year 2000 
problem. 
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1. Requests all Member States to attach a high priority to raising the level of 
awareness, both by ensuring that the private sector is fully engaged in addressing the year 
2000 problem and by tackling the problem in those systems within their own control, and 
CO consider, inter alia, the appointment of a rtationwide coordinator for this purpose: 

2. Apptals to all Member States to forge global cooperation to ensure a timely and 
elective response to the year 2000 chaltenge; 

3. Calls upon Governments, public and private sector organizations and civil 
society to share locally, regionally and globally their experiences in addressing the year 
2000 problem: 

4. Reqyesu the Sccrctary-Oenemi M take steps to ensure that all pans of the United 
Nations system tike measures to ensure that their computers and equipment with embedded 
microprocessors arc year 2000 compliant well before the target date by drawing up a plan 
of action for the United Nations system; 

5. Calls upon the Economic artd Social Council to prepare at its substantive session 
of I99S guidelines on which Member Sates will be able to draw in addressing the diverse 
aspects of the year 2000 problem; 

6. Requests the Secretary-General to ensure that the United Nations system closely 
monitors actual and potential sources of funding to support the efforts of the developing 
countries and countries with economies in transition to address the year 2000 problem, and 
to Etciliute the dissemination of relevant information on thove funding possibilities to the 
Member Sates; 

7. Requests the Secretary-General to report to the Central Assembly at iut filty- 
third session on the steps taken within the United Nations system and with Member States 
to resolve this problem. 

8. Decides to include in the provisional agenda of its fifty«third session an item 
entitled "Global implicaiions of the year 2000 date conversion problem of computers" and 
to complete its action under that agenda item before the deadline of 3 1 December 1 999. 




112 


PRESIDENT CLINTON CHAL LE NGES BUSINESSES 
TO ADDRESS THE YEAR 2000 COMPUTER PROBLEM 

VICE PRESIDENT GORE DOCUMENTS FEDERAL EFFORTS TO DATE 

July 14, mt 

National Aajamy of Seienca 


Today, President Clinton will review the Fedotl Government's efforts to prepare its critical 
systems for the year 2000 century date change and challenge businesses to take responsibility fpr 
making sure that their systems are ready for the new milletmium. The President will announce 
Federal initiatives to promote information sharing on year 2000 efforts and to connect people 
who have skills for addressing the problem with employers who are in need of their services. 


Order of Speakers: 

Dr. Bruce Alberts, President, National Academy of Sciences 
Vice President Core 
Presidem Clinton 

Set attached fact sheet. 
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PRESIDENT CLINTON CHALLENGES BUSINESSES 
TO ADDRESS THE YEAR 2000 COMPUTER PROBLEM 

VICE PRESIDENT GORE DOCUMENTS FEDERAL EFFORTS TO DATE 
July id, t99i 

THE YEAR 2000 PROBLEM. In the second halfof the twentieth century, information technology has made 
possible advances ranging fiom the ability to invest electronically in martets halfway around the world to 
satellite tracking of approaching weather systems to ground breaking research to find cures for foe most 
complex diseases. 

The year 2000 problem (Y2K) is a threat to that progress. It stems from the use in many computer systems of a 
two-digit dating mefood that assumes 1 and 9 are foe first two digits of the year. Without programming 
changes, foe systems will recopiiae 00 not u 2000 but u 1900, which could cause the computers eitherto shut 
down or to malfunction on January 1 . 2000. 

THE CHALLENGE. Y2fCU a problem that affects organizations around foe world. While foe Federal 
Govemmmt is responsible for fbdng its olticat sterns, government and business leaders here and sbcoad must 
take responsibiUty for fixing fodr systems if we are to succeed in minimizing year 2000-related disruptions. 

The President and Vice Preaident are leading the Federal efforts and encouraging other governments and private 
sector organizations to do fodr part 

PRESIDENT CLINTON ANNOUNCES NEW INITIATIVES TO ADDRESS Y2K CHALLENGE. 
Preddent Clinton today announced iiotiativei to help wginizations in their efforts to address foe year 2000 
problem. Theaeinitiativeaaredesignedtoptofnoteinfonnationfoaringon Y2ICeffofis,connectpeople who 
have sldlls for addressing foe problem with employers who are in need of their aefvices, and increase awareness 
of the problem in developing countries. 

» Yew 2000 "Good SMiwrifn** The Administxadon will submit to Congress proposed 

legislatkm to promoie a toon open riisring of yetf 2000-related infmmatioii by protecting th^ who 
carefully share mformatioa on Y2K aolutioai or on whether a product or acfviee it Y2K-coinpliaat from 
liability claims baaed on foe diacing of foatinfonnatioa. The proposed legitUtioa decs riot however, 
address liability that may Mparately wiae from actual Y2IC foiluica of systems or devicei. nor is it 
to sltflT oontraclml rights. 

Frffwyifo* Ibdiy, tmtftrt df e natUmal tnduttry auodaUon mi^ dtoon net to devidep a 
wsfrrforoii YlKoohttUma fotherod firm tevtral souree$ for foar that orfoeitattom mt^ b€ 

hddliebiofarAspleyUtgbiacaa^Urformetion. ff^th the kgfHatfoe bt piece. assodoHon 
executhm ¥dlt be more wUliitf le take erntMit vital doarb^fieete Jumciiem. UiUets they know the 
utformatien isfihe, their onfyebt^atiee ie u> disdete that the it^tmnertem is e rspublleetion. 

Example — rodby, a Y2Kprofedmeeagsrwhete$tsopartlealarsysiematul/Msittobenon~ 
compliant may bs hesitant to share this /biding with ceUea g net in other firms becew his 
cempaay aUerney has warned him Aet spreading such information eoaid lead to prodad 
disparagement mdtL With ^iegislatien in place, this manatercoatdfeel confident in relaying 
his experienoes to others becanse he wUl have additional protections against liability. The 
legislatian protects a/^nne sharing such information nnleu th^ ad with knewled^ that tlm 
iitformatUm was false or w^ rtddess disregvd as to the troth or falsity of the iitformatton. 
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• LabofPcpartpiignt World Wide WAV2IC Job Bank. The Ubor Dq>«tment today « v-yif 

infemudioB technolocy (FT) veisioo of AniericA*t Job Book/Aaerica'a Talent Bank (AJB/ATB) at 
hRp*7^t.jobseareh.org in order to concentrate ti^ supply (wocken) and the demand Qobs) in the IT 
industry in a single place. The product of a unique partnetifaip between the Dqrarti^t and the States, 
AJB/ATB, at www.iyb.dni.us, already provides a significant penetration into the area of computer and 
high-tech jobs and talent, with approximately 40,000 resumes and 120,000 IT jobs listed. 

• World Bank Contribution . The United Swes will contnbute S12million to support the World Bank’s 
efforts to increase awareness of the year 2000 problem in developing countries, where Y2K information 
is scarce. The Bank is holding 20 regional Y2K conferences around the world to increase awareness and 
provide infonnatton about the problem to devdoping countries. 

• Mtianal rampaitfn for Year 2000 Solutions . Later this month, the President’s Council on Year 2000 
Convenion will kick off its Tlstional Campaign for Year 2000 Solutions” to promote public and private 
sector aedoo on Y2K and to foster informsdon-shiring about solutions. 

PRESIDENT CLINTON'S COMMITMENT TO INCREASING AWARENESS OF Y2K. President 
Clinton is coounitted to encouraging businesses to focus on fixing their year 2000 problems. 

In Fdxuaiy, he estabUtfaed the President’s Council on Year 2000 Convenion to coordinate the Government’s 
efforts to inoeaae awareness of the problem and encourage action in public and private sector organizations. 

The CouDcil’t 34 agency working groups are focused on arcu that range from energy to telecommunications to 
financial institutions. 

• The Small Business Administratioii, chair of the small businesa working group, is focused on 

twareaesa of the pKoblem among the Nation's more than 20 million small businesses. As part 
of its “Are You Y2K OKT* campaign, SBA is encouraging small business owners to determine their 
Y2K risk by conducting a self-assessment test avaitsbte on SBA’s Internet Y2K web page 
(www.riMLgov/y2k/). 

• The Energy Department and the Federal Energy Regulatory Commission, co-chain of the energy 
working group, are working witii indusby associations such as the North American Electric Reliability 
Council, die American Petroleum Institute, the Natural Gas Council, and the Gas Industry Standards 
Board to eosuie that the energy industry is addressing the problem as it relates to electric power and oil 
and gas supplies. 

• Tba FodcEit Cnmmunicatioas Commissioo, co-chair of the Council’s telecotnmumcattons working 

gio^p, is naeting with domestic and international telecommumcations carriers and equipment 
mwufaf4ur Bc a to diaeuss Y2K, and has written to m^or and organizations in all sectors of the 

tnduaby to fwiphat i w the u n p ort a n c e of ad^essing the problcaa. 

• The Federal Rfacnr, dutirof the fiiuHrial inarihiriont working group, and other Federal financiai 
olfaar finanrial imtihitioiis and promoting industry-wide syitcns lasting. 

P i tii d cn t ClialQa is also oonunitted to uKrearing iiUeniatioaal aw armm of the problem. 

• The Preaidenc has discussed Y2K with heads of state at both the G-S Birmingham summit and the 
Sununit of the Americas. Abo, under the Pre side nt’s leadership, die Year 2000 Council worked closety 
with the United Nations on the draft of a recently paned UN reaolution that calls upon all member states 
to aet on Che problem. 
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Transcript, Digital Video Conference with John Koskinen 

John Koskuten, Chainnan of the Preaideafi Council on the Year 2000 (Y2IC) Conversion, held this 
digital video conferenoe (DVC) with r eporter s in Moscow July 16. 

I'm delighted to have a chance to join you this morning and inaugurate this 
wonderful program that the United States Information Agency has put together to 
allow us to re^ out to countries around foe world to discuss the problem 
presented by foe transition from foe 1999 date to the year 2000. As Jonathan 
noted, the President asked me to conie back to organize foe United States Federal 
Government's reqjonse to this problem. As I have told our federal agencies, we 
view this as a thr^tiered problem. 

Our first problem, and foe one we have most direct control over, are our own 
federal sj^ems. And those are, in many cases, very large, very complicated, and in 
a lot of cases, somewhat antiquated. In foe 19S0s and the 1960s, foe federal 
government was one of foe first, and realty foe largest, developer of software and 
information technology. Which means that most of those programs were 
custom-designed, not standard, and were built on over time, as we expanded the 
processing. 

So our first problem is to ensure that basic government services, particularly to the 
public, are maintained. We are focused on benefit payments, both for retirees as 
well as for health care payments. We're concerned atwut unemployment insurance 
paymrats, payments to our veterans, and of course, are very concerned about the 
opentions of our Internal Revenue Service, which collects and processes a 
tnllion-and-a-half dollars worth of payments every year. 

B 

All of foe systems behind those programs are very complicated and we've been 
working on them, in some cases, in our Social Security retirement benefit 
program, as long as nine years. As a result, foe Social Security benefit payment 
system appears to be nearing completion in its work. Unforturutely, in a number 
of other iMeral agencies, we still have substantial work to be done, even though 
every federal agency has been working on this problem since foe end of 1995. 

The second tier, from our perspective of foe problem, is foe systems that we 
exchange data with around foe country and around the world. Because it's clear, in 
this intCRonnected world we all live in, that if our federal systems are able to 
function, but the systems with which they exchange data or financial information 
are not able to fun^on, we wilt have a difficult problem for foe economy and for 
foe American public. 

When I met with all of foe heads of foe miyor federal agencies when I started, and 
Pve had 43 meetings with 43 different agency heads with their senior staffr, and 
t^ed to them about the three-tiered problem, they hedged and were focusing their 
time on the first tier, their systems. They had begun and foe government had begun 
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to look at the second tier problem of the interfaces of those systems outside the 
govenunent And what I spent time talking to them about was the third tier of the 
problem, which is reaching out beyond their noimal activities to those operating in 
the country and around the world in their areas of interest, where a failure would 
create an insignificant problem either for the economy or for the public. 

And it's that third tier that we are talking about here today. Because we ate very 
concerned that even if the federal systems work and even if the systems they 
exchange data with work, but other significant systems around the world do not 
work, there will be great difficulties, not only for those who dq)end directly on 
those systems, but for us as well. So while we do not control those systems, we 
carmot tell those people, either in our private sector or of any of those of you 
around the world, w^t to do, we ate very anxious to reach out and to provide 
whatever support and assistance we can to encourage people to deal with this 
problem effectively. Our biggest concern, both wittun the United States and 
internationally, ate those organizations that are not paying si^ficant attention to 
the problem or any attention to the problem. Our experience is that organizations 
that are focused on this issue, that have strong leadership fiom the he^ of the 
organization, and are devoting resources to the program and making it their top 
priority, obviously have the greatest chances of success in dealing with the 
problem. Where we are concerned are where we do not have that kind of 
organization in place. In the United States, our major concern are small to 
m^ium-sized organizations, both in industries around the United States, but as 
well as in state and local government Abroad, we are concerned about the at least 
SO percent of the countries in the world that have barely begun to pay attention to 
this or are not paying attention at all. And that's one of the reasons I was delighted 
to receive the materials that Russia has put together in May, organizing an 
approach to dealing with this problem. Because I think of all the steps you can 
take, that is the most critical one, which is to provide an organized approach to 
bringing everyone in the government systems together, starting to work and focus 
on the problem. 

Our concern and our analysis is that many of the small to medium-sized 
organizations, and even some of the countries around the world who have not 
begun to pay attention to the problem, have not done so because they assume that 
this is not their problem. If they are not running major mainfiame application 
programs, they assume that the year 2000 problem does not affect them. What they 
are overlooking is what Fd call the growth industry of the problem, which is the 
problem of imbedded chips or integrated circuits. 

And it turns out that numerous rqrerating systems, manufacturing plants, 
transportation sterns, corrununication systems, all operate on the basis of 
integrated circuitry or embedded chips in their hardware, that in effect, monitor 
and control the operMions of those processes. Now, fortunately, only a very small 
percentage of the chips in their applications have the potential to malfunction on 
January 1 of the year 2000. That percentage has been estimated, as a general 
matter, to be between I and 2 percent. It could be as high, in some applications, as 
S percent. 

And that's a small percentage, but one year recently we shipped almost S billion 
chips into conunerce around the world. So with a 2 percent risk rate, that means 
there are 100 million chips, in that year alone, that are capable in their applications 
to create difficulty. And we know that around the world, we are tunning oil 
refineries, power plants, manufteturing ftcilities, large transportation facilities, 
and cargo ships with people sittir^ at computers responding to the information that 
is produced by those integrated circuits or embedded chips. 
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And so therefore, we are concerned that many oi;ganizations, many governmental 
organizations in the United States have not r^ly focused on that aqiect of the 
problem as it directly affects them. So with our state and local governments, for 
instance, we are telling them they need to do an assessment to ensure that their 
mobile communication s^tems will be up and operating, to ensure that their 
emergency equipment will operate, to ensure that their local utilities will operate, 
to ensure that their local transportation systems and traffic lights will operate 
effectively. 

In many ways, it would be an easier problem to deal with if we could guarantee 
people that everything would stop. Because th^ everyone would go out and fix 
everything. In this case, and certainly with fire imbedded chips, the vast majority 
of the systems will be imaffected. And so, it*s important for people not to waste 
money replacing or renovating systems that don't need to be replatred. And 
therefore, the most important step after you become organized is to actually do an 
inventory and an assessment of dl operations, both the application systems and 
software systems, but also manufacturing and operating systems, to determine 
whether there are areas that need to be pursued further and whether there are areas 
that need to be tested to ensure that there will not be a difficulty as we move across 
those borders. 

The way we have organized the federal government to deal with these three tiers 
of operations is, we have created what we call the President's Council on the Year 
2000 Conversion, which I chair. It has a single rqrresentative firom 35 different 
agencies across the federal government, including all of our regulatory agencies 
that regulate our financial markets and our financial institutions, as well as 
agencies including, obviously, the Defense Department, even the CIA. Because it 
is critical for us to be able to share information across those borders. 

We have organized and analyzed all the sectors of the American economy and 
government operations, including international operations into ~ and we have 
now 34 sectors, which are headed, each of them, by a separate agency. Sometimes 
the same agency has more than one sector and they head up a working group of 
appropriate federal agencies dealing with that area and reaching out to those 
operating in that sector. So, for instance, internationally, our international 
corrununications sector involves several federal agencies. It is chaired by Jonathan 
Spalter and USIA and charged with doing whatever we can to communicate 
through both our embassies and our operations of law, but directly with countries 
around the world, to demonstrate our concern. 

Our basic, ultimate list, we think, is fiom our increasing dependency on 
international cooperation. Not only is it a global village, if s a global economy that 
depends increasingly on the exchange of data and financial services electronically. 
So that we ate concerned, yet as an old adage says, the chain is only as strong as 
its weakest link. And we are looking at the chains in financial transactions 
internationally and telecommunications internationally and transportation 
internationally. Because we are concerned that all of those chains are at risk if 
there are any weak links. So it is in our own interest, as well as in our interest in 
the welfare of those operating around the world, to do whatever we can to try to 
provide assistance to those operating in those areas. 

And 1 think the first thing we are focused on in trying to provide assistance is to 
increase the level of awareness and activity around the world. We have worked 
closely with the United Nations. I worked with Ambassador Kamar of Pakistan, 
who heads the United Nations working group to pass the recent resolution. In a 
resumed session, the United Nations called on all member states to take action 
with a report back to the general assembly in October. I have met with Mr. 
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Wilkenson, the head of the Worid Bank which is now, thanks to a contribution 
from Prime Minister Blair of England, holding 20 regional conferences around the 
world to provide information to countries across the globe. 

The President made a major address on this subject on Tuesday with the Vice 
President and announced that we will be contributing $ 12 million to support the 
World Bank's efforts to reach out around the world. I have met with the head of 
the International Mot^tary Fund, who has agreed that they will use whatever 
influence they have to encourage countries around the world to pay attention to 
this problem ted to^evote the appropriate resources to it. I've also met with 
Intelsat, which tu^ the major communication satellite network around the world. 

One of the rarepieces of good news is that the satellite system is fine. The 
problem is access through ground stations around the world and Intelsat, which is 
basically owned by 143 countries, is concerned that many countries, if they do not 
pay attention to this problem, will lose their access to the international 
communication network. So it's a major challenge. It could even be called a crisis. 
We are anxious not to cause people to panic and take unproductive or 
counter-productive activities, such as deciding to take all of their money out of 
financial markets or out of banks. We'd like to not have everyone show up at the 
end of next year trying to fill up their gas tanks. 

But at the same time, we need to get everyone around the world to treat the 
problem seriously and to focus on the appropriate resources to deal with it As 
Jonathan said, as the President said on Tuestey, this is the greatest management 
challenge that the world has ever, in a concerted effort, had to face. And we are 
preparte to do whatever we can to provide assistance to those operating and 
working in this area around the world. 

So that's the short form background of where we are, our approach to the problem. 
And I would be happy to answer any questions you might have about anything I've 
said or anything else that you have a question about. 

Q: What is the price or the cost to the U.S. federal government? We have heard 
different figures of frll-in dollars. What do you thii^ about the cost of the solution 
to this challenge? 

A; That's a good question. It's one of the few questions I have a clear answer to. 
The cost for the fteeral government to fix its own systems over the period from 
fiscal year 1996 through fiscal year 1999 is almost exactly 5 billion U.S. dollars. 
Of that amount, about 1 .2 billion U.S. dollars will be spent in the fiscal year that 
begins October 1st of this year and teout $2 1/2 billion is being spent this year. 

So, well over half of the $S billion will be spent in 1998 and 1999 and we are, as 
we say, confident in those numbers because we ask the agencies every three 
months to provide us progress reports on how the/re doing and also Aeir present 
cost estimates. 

Now, we are asking the Congress, because we are getting close to the year 2000, in 
the appropriations that they are now considering, to create a contingency or 
emergency fund for any additional, unexpected expenses that may occur. And it 
will not surprise me at all, because of the unknown nature of this problem and the 
unique nature of it, for our SS billion number to increase by as much as another 10 
to 15 percent. 

Q: What is the percentage of world chips available that you expect to fail in the 
year 2000? Do you think it is impossible to deal with all the possible unexpected 
failures within this brief period of time? 
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A: With regard to the percentage of chips that will fail, as I noted, there is no one 
who knows the absolute answer to that The experts have estimate that about 1 to 
2 percent of the chips will fail. In some forms of applications, that could be as high 
as 5 — some people have even found that 7 to 8 percent fail. I would note, having 
met with the Chip Manufacturers Association recently to talk with them about tUs 
problem, that often the chips — generally, the chips thonselves ate not the 
problem. They are basically neutral about the date. The problem comes when the 
chips are installed in either a circuit board or in an operating system and 
progranuned by whoever is manufacturing it. And if they program it to be 
date-sensitive, that's where the problem is created. 

So, the difficulty is that the chip manufacturers often don't know what use the 
intermediate suppliers have made of those chips and in terms of whether or not 
they will fail. But as a general matter, our experience thus far has been that a very 
small percentage of the chips will fait. But it's a small percentage of a very large 
number of chips. 

With regard to the software, one of the reasons these problems exist is that when 
progranuners 30 to 35 years ago began to program tr^g to save space by only 
identifying the year with the last two digits — for instance, 1965 Was identified as 
65 because it saves significant memory space ~ their assumption was that the 
programs they were designing would never be in use later on, so it would not be a 
problem. That assumption continued to carry through even into the early 1990s, 
when people assumed that the software they were programming would only be in 
use three to four years and then would be rq>laced by new software and the 
problem could be solved near the end. 

Part of the problem with that is that many companies and many people, as a result, 
paid little attention to this problem until very recently. Because their assumption 
was that it would be an easy solution simply to buy new software. And in some 
cases, that will be the solution and if that's all that's involved, you can solve the 
problem very easily in the time remaining. The difficulty is, with anyone running 
anything that looks like a very complicated system -- and most financial 
management systems, tax management systems, financial transaction systems, are 
very complicated. They aren't a single-software system and they aren't a system 
that we've just bought recently. So banks, insurance companies, brokerage houses, 
all have large systems that have been built over time in a process of evolution, 
where the newest software was added into or on top of an existing system. And it's 
that older existing system with all of its software systems and all of the custom 
design that is the core of the problem. And that is why, if you only have a personal 
computer and you simply need a new upgrade, you'll be able to solve the problem 
easily. But if you're a large institution, particularly a large bank or a large 
insurance company, you've got a lot of software systems that you need to upgrade 
and renovate because there is no easy replacement for them. That's the difficulty. 

With regard to the time, obviously some large financial institutions in the United 
States have been working for over two years already on this problem, so that by 
definition, if you started today, there aren't two years left. In fact, there are 533 
days left, for those of us who are forced to keep track. And therefore, one of the 
things we are trying to do is encourage the sharing of information wherever we 
can, so that organizations starting to deal with this problem can take advantage of 
and get the benefit of the work that's already been done by others around the 
world. 

And the President announced on Tuesday that one of the things we're now woiking 
on is to limit the liability of companies that exchange information about how to 
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deal with this problem, in case all of their information isn't a hundred percent 
accurate, so that they won't be sued because of the information. They can still be 
sued because of the systems that don't work, but what we're trying to do is make 
sure that everyone has the ability to share and provide the benefits of the work 
they've done flhus far. 

Q; A few days ago, the American defense department decided to share information 
with the Russian defense forces with the view of ensuring the perfect fimctioning 
of the early warning systems....How well is the American administration aware of 
what is being done in Russia that will meet the challenge to deal with the 
problem...? 

A: Well obviously, all of us have a high level of concern. Not only about nuclear 
weapons, but nuclear power plants and other issues that could be a great threat to 
people anywhere in the world as a result of accidents. So, I have met with the 
secretary of defense and the deputy secretary and we talked about their initiative to 
try to ensure that at a minimum, there are no misunderstandings as we move 
toward the year 2000. And either our system's or your system's early warning 
systems, or the early warning systems of other countries - if they have a difficulty 
with the transition, don't generate mistaken information that people would then 
respond to. 

So we are very anxious, at the first st^, to make sure that we share information, 
that there is mutual comfort, that if there is a problem with an early warning 
system, we'll have backup ways of checking with each other to ensure that we 
have accurate information. But we are also concerned about a significant other set 
of problems. 

As you know, by the president's recent strong support of the International 
Monetary Fimd program with Russia, we have a great interest in and hope for the 
continued expansion and growth of the democratic system in Russia. We are 
anxious to support the stabilization of the Russian economy and its expansion 
because we feel that everyone will benefit with a successful, active, democratic but 
economic system in Russia, working as a major partner with us going into the 
future. 

We also have concerns in other countries if there are major economic difficulties 
in any country as a result of the year 2000 problem, and we view that as a problem 
for the world conununity. We tr^e with countries, we have increased trade with 
Russia, with other countries. We de{^d upon those countries both for our 
supplies and products, as well as their markets, so that we clearly do believe that 
there is no country anymore in the world engaged in international commerce and 
interchange that can stand by itself and be unaffected by the problems elsewhere. 
So, while we have the highest concern to make sure there are no accidents with 
either nuclear weapons or nuclear power, we have an equally high concern to do 
whatever we can to make sure that there are no other major economic or social 
difficulties as a result of information technology fiulures. 

Q: What about the law proposed le^slation by President Clinton to limit liability 
in the sharing of technical information about Y2K.? Do you think that law sould be 
adopted in Russia? 

A: We hope that legislation will paK this summer in the United States. We think 
that it is an important concept, arid it would be important in Russia as well. Fm not 
familiar with the details of your legal system. We have a very complicated system 
where people have a lot of legal rights to bring dimutes into the court system. That 
is what concerns us because here companies are ataid to either discuss their 
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experiences with a certain software or hardware product in terms of whether it 
works or not, or to share information about how they fixed a system, for fear that if 
they say, this is how we fixed our system," and someone else relies on that and it 
turns out it doesn't work in their system, Ac first company will be sued because of 
that exchange of information. As a result, we have many large companies here 
who have a lot of information that they do not feel they can tell anybody about or 
share. 

So, we think it's important here. We think, especially with the fact that your 
organized program in Russia is coming together late, that it will be critical for you, 
for industries and government agencies and everyone working on the problem, to 
view this as a community effort and to try to share information as mu^ as they 
can. Obviously, you don't want people putting out information with no basis 
whatsoever, /md so, you want them to have some standard of care. We're talking 
about — you have to do it in good faith and without gross negligence. But beyond 
that, we think on balance we do better with a free flow of as much information as 
we can get, rather than trying to hold people very strictly accountable if their 
information isn't totally acciuate. 

Part of the reason we feel that way is that no one can guarantee anything in this 
area. So when a company says they are ready to deal with the year 2000, they are 
saying that on the basis of the best information they have. But because this is a 
unique problem, there's no way to know until we get to January 1, 2000, whether 
all the systems that have been fixed will actually work. So therefore, I would urge 
you, in your approach, to try to get people to understand this not a time for 
competitive advantage. This is a time for a community effort to try to ensure that 
the basic infiastructure in your society and your country works, that the basic 
ability to conduct financial transactions as well as personal transactions are not 
interfered with to the extent possible. 

Q: What other powers of the committee you're heading? Who are its members? 

And has it got a definite plan? Is it one of the committee's functions to control the 
activity of the government agencies and departments in handling the Y2K 
problem? 

A: That's a very good question. Each of the major federal agencies has one 
member on the corrunittee. I told the heads of the agency they could select a 
member, but there were two criteria for membership. One is, whoever was selected 
had to be senior enough in the organization to know what the agency was doing 
internally and externally in its outreach programs to deal with the problem. I 
needed someone who loiew what the agenc/s activities were. The second criteria 
was, I needed someone with enough authority in the agency to be able to corrunit 
the agency to taking action in the course of a committee meeting without having to 
check back with the agency. 

As I told the council, "The only words that will be unacceptable in any of our 
meetings will be, T'll have to check on that'" So that means that basically, the 
members of this council are either the deputy secretaries, the number two person in 
the department, or the chief information officer, the senior technological person in 
the department. And the agency heads have all agreed that if the council decides an 
action needs to be taken, that the members of the council from the agencies have 
the authority to agree on behalf of their agency to take that action. 

We are monitoring the activities of the agency. In the White House, according to 
the President, we have an Office of Management and Budget. That is, the budget 
and management arm of the government. I used to be the deputy director for 
management at that organization. When 1 was in the goverrunent before, we set up 
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a quarterly repotting process to the Office of Management and Budget, which the 
agencies provided standardized reports for the level of their progress; what 
percentage of assessment had they done of their mission critical s)rstems, what 
percentage of renovation — fixing those systems had they done, what percentage of 
testing had they done, and ultimately, wlit perceiitage of their systems were 
implemented with the year 2000 compliant operations. 

And those quarterly reports come into OMB every quarter and they come to the 
council and to me as well. And I am now working with a half a dozen large federal 
agencies who are not making sufficient progress, we think, to be able to deal with 
the problem in the time remaining. So I now meet with them on a monthly basis 
with their senior management reviewing their monthly progress. We have, in terms 
of our power, an executive order that calls upon the agencies to cooperate with the 
council. 

But my power and the council's power is primarily because everyone knows the 
president and the vice president personally asked me to serve. And so therefore, 
they know I can call the resident and the vice president back if I need to. But my 
management style is not to issue edicts; it is rather to work in a collaborate, 
consultative basis with everyone so that we feel that we're working in it together 
rather than I'm telling them what to do. 

Similarly, in our reaching out to the private sector organizations, where we clearly 
haye less authority in many cases to tell them what to do, our strategy is to work 
with them in a partnership, where we exchange information with them and they 
with us, and we provide them s^|Mrt where we can. The request for the Good 
Samaritan legislation limiting lir^ility came fiom some of those pri vate sector 
industry groups who are concerned about their inability to exchange information. 
And they asked us, as part of our meetings with them, could we address that 
problem, which we hope to be able to do this summer. 

In terms of our planning, we have a set of benchmarks for the federal agencies that 
are set up in that quarterly reporting process. They are supposed to be complete 
with all of their fixes of the systems, all the remediation by September 30th of this 
year. They are supposed to be complete with all testing of those systems by 
December 31st of this year and they are supposed to have all implementation done 
by March 3 1 of 1999. 

And the reasdn that deadline, which used to be November of '99, was moved to 
Match of *99, was because everyone reco^zes when you've fixed the system, 
you've tested it, and you've implemented it, then you still have to go back and test 
and run it again - b^use this is a complicated, unique problem and there are 
alwa)^ more things that people think theyVe fixed, that when you start testing 
them in operation with other systems, have not been fixed. 

Now, not every agency is going to meet those deadlines. And the six large 
agencies that I'm meeting with are the ones we think that are at risk of not meeting 
wme or all of those deadlines. But we have some area of comfort in the sense that 
if th^ do not meet the Match 31 *99 deadline, we hope that they will be able to, 
within a month or two thereafter, meet that deadline. My advice and experience is 
that it is important not only to have general deadlines like that. Also we have now 
asked the agencies to do is to develop a management plan from now until they're 
finished, with a monthly set of benchmarks as to how many systems they propose 
to have through the process each month. And then to report, on a monthly basis, 
against their progress against those benchmarks. 

Because every agency will be in different circumstances with different systems 
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and different challenges and if you're trying to manage the process and see where 
your difficulties are, the most important information is who is falling behind their 
monthly management plan. So, we have moved to that direction because we're 
tiying to make sure we get an early warning of where people are falling behind 
their own plan. 

The other thing you will find in any organization that's through around the world, 
is if you ask someone, are they going to be ready by the deadline, they will always 
say yes. Everyone's optimistic. No one wants to say they can't do it. But what 
we're doing with the monthly benchmarks now, which we just started doing two or 
three months ago, is try to check to make sure that what we don't have is people 
making sort of flat progress for the first several months and then at the end all of a 
sudden the graph goes up. And it, you know, generally won't make sense to say 
that we're going to do 70 percent of the work in the last month before the deadline. 

So, one of the reasons we ask them to share with us their plans, on a monthly basis 
throughout the entire process, is to test the reasonableness of those plans and to try 
to get them to understand that they need to manage against a reasonable set of 
expectations each month. The other thing that we have discovered, when you're 
managing a difficult problem for people to deal with, is to attach the highest 
priority to this problem. You will find that organizations will set up an 
organization to deal with this, it will be important to them, but they will have other 
priorities that are important and no one will disagree with what they're working on 
in the information technology area. They will be upgrading systems, they will be 
adding the systems, they will be dealing with other problems of the agency or the 
organization. But if this work is going to get done, this project has to be the most 
important. 

So in two or three major federal agencies in the last three months, we have 
succeeded in getting the Congress and the agency management to understand that 
some policy initiatives and some changes in programs that we think ate important 
will have to be delayed so that we can devote the appropriate time and resources to 
solving this problem. Because what it turns out to be is there's only so much space 
and time available to work on a system. And often times, the people who are 
providing new policies and programming new policies into the system are the 
same people who have to actually fix the system. And they can't do both things at 
the same time. 

So, it's not a question of just hiring more people. There's only so much availability 
of the systems to be able to be worked on. So, one of the things we're doing now is 
to get concerned about some of the federal agencies and their ability to meet the 
deadlines ~ is getting them to delay some of the things that they or the Congress 
or even the president would like to have implemented sooner. And we're going to 
delay some of those things to try to make sure that the systems operate. 

For instance, in our Medicare health benefits program, we have changes that the 
Congress has asked to make in the way the benefits are calculated and the amount 
of benefits. And the organization/agency running that program announced two 
weeks ago that some of those changes, in some cases increasing benefits, will be 
delayed because the system otherwise would not be able to function effectively on 
January 1 , 2000. And as the head of the org.anization said, if the system doesn't 
operate at all, it doesn't matter what the policies are, so that it would be a great 
mistake to have a good, new policy and have to program it into the systems and by 
virtue of that, have the system shut down. 

Q: What steps have already been taken to dale, particularly steps to coordinate 
with the Russian side? 
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A: Well, I assume that you'd like to know stqjs are we taking internationally, 
particularly with the Russian side. As I not^ we are woridng with the United 
Nations and the economic and social committee there to provide as much 
information as we can to countries around the world. We are financially now 
supporting the World Bank effort to work with developing countries and those 
starting late on the problem, to provide information and expertise about how to 
deal with that problem. 

We have asked American embassies and ambassadors around the world to begin to 
engage in discussions with each of their host countries about the level of their 
activities and what problems they are having, so that we will be^n to, with other 
countries, develop a picture of where each country in the world is, because all of 
us will have interest in knowing where the difficulties are likely to be and where 
countries are making progress. 

With regard to our direct relationships with Russia, as someone noted earlier, the 
secretary of defense has already offered to share information with regard to the 
early warning systems. We are also anxious to provide expertise and information 
wherever that is appropriate. We are working with the International Bank for 
International Settlements, which is organizing financial, central bankers around the 
world to deal with the problem. Our Securities and Exchange Commission is 
working with the international securities market regulators, trying to provide 
information to financial market regulators and operators around the world. 

So that we are trying to provide as much information as we can, our Federal 
Aviation Administration, which runs our air traffic control system, is working and 
pushing the International Transportation Association to work with air traffic 
control systems around the world. We are, in fact, anxious to provide whatever 
assistance we can to the air traffic control system in Russia because obviously we 
have much air transport and traffic, not only with Russia but all of Asia does as 
well. 

So, in each of the sectors, we have asked our agencies here to work with their 
international organizations to reach out and provide assistance. 

[end transcript] 
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THE PRESIDENT: Thank you very auch, Mr. vice President, 
Dr. Alberts, to all of our platfora guests. Senator Bennett, Senator 
Dodd, Congressaen Horn, Kucinlch, laFalce, and Turner, and aeabers of 
the adalnlstration who are here, and all the rest of you who are 
coaaltted to dealing with this ^allenge. 

This is one of those days that 1 never. thought would 
ever arrive, where A1 Gore has to listen to as give a speech about 
co^raters. . (Laughter.) Being President has its aoaents. 

(Laughter. } 


I have to ask your Indulgence because this is ay only 
opportunity to appear before the press today, and I need to aa)ce a 
brief ooaaent about soaethlng that is also of laportance to all of 
you, and that is the agreaaent that was reached yesterday between 
Russia and the International Monetary Fund to stabilise the Russian 
econoay. 


I think all of us understand that a stable and 
deaocratlc and prosperous Russia is critical to our long-tera 
national Interests. Ever since the fall of coaeunisa there, there 
has been a strong bipartisan consensus in our national govamaant, 
and I ballava in our country, to worklt:g toward that eiw). 

The coBBitaenta that Russia Bade in connection with 
yesterday's agreaaent will substantially advance econoalc rafora and 
stability there. Now it is critleal that those coaaltaents be 
liqileaented to strengthen confidence in thsir econoay. 

It is clear, I think, to all of us now that our 
prosperity here at bone in Aaerica is deeply affected by the econoalc 
conditions elsewhere in the world. About a third of our econoalc 
a: 9 anaion that the Tice President referred to, which has given us 1« 
Billion new jobs and the lowest unaaployasnt rata in 28 years with 
the lowest inflation rate in 32 years, has ooas froa our exports and 
our aconoaic relations with the rest of tha world. Ha, therefore, 
have a clear interest in playing a leading role to advance freadoa 
and prosperity and stability. 

One of the aost cost atfeotlve ways of doing that is 
through the International Monetary Fund, the world's financial 
firefighter. For the first tine in 20 years now, tha IMF has had to 
draw on special oasrgency reserve to underwrite this Russian 
financial package, because its resources wars stretched dangerously 
thin due to tha financial difficulties throughout Asia, principally. 

To protect our aconoalo strength, therefore, it is 
laperatlve that Congrats act now to proaota global eooiwalc stability 
by paying in Aaorloa's share to the INF. Earlier this year the 
Senate, in an ovaxwbalaing bipartisan vote, endorsed legislation to 
strengthen tha IMF end to pay our fair share into it. Since than, 
tha legislation has languished in the House. If we fall to act 
responsibly at a tiaa when there is so auch financial uncertainty in 
the world, we will be putting our farasrs, our workers, and our 


MORE 



126 


businesses at risk* niis is a tine to put progress ahead of 
partisanship, and I ask Congress to proceed to do so. (Applause.) 
Thank you. 

l,et ne also say at the outset, I want to say a special 
word of thanks, as the Vice President did, to John Koskinen and his 
whole tean for the work they are doing and to all the people that are 
working with then. Me have just on this platfom representative 
people from utilities, from transportation, fron finance," fron 
teleconnunications, and from snail business. And this really is a 
joint effort we are all naking. 

But Z thank you, John. You know, before Z becane 
President, Jc^ Koskinen was a personal friend of nine •• Z doubt if 
he still is now that Z got bin to do this. (Laughter.) But irttat's a 
friendship to save the country's wires, so Z thank him. (Laughter.) 

Z asked Bruce Alberts this — Z renenbered that Richard 
Berks' magnificent statue of Albert Einstein is right outside here, 
and Z wish we could bring him to life for this nonent. But Z'll 
drive by it on the way out for inspiration. 

Zt seems unbelievable that it's only 535 days from now, 
at the stroke of midni^t, %fhw we will usher in a New Year, a new 
century, a new millennium. Zt will be, to be sure, an astonishing 
age of possibility, of remarkable advances in science and technology, 
a time when information clearly will widen the circle of opportunity 
to more people in the world than ever before, and tdien technology 
will continue to shrink our small planet and reguire us to deal with 
challenges together, including that climate change challenge that Dr. 
Alberts referred to. 

Zt is fitting, if sore than a little ironic, that this 
same stroke of midnight will pose a sharp and signal test of whether 
we have prepared ourselves for the challenges of the information Age. 
The Vice President discussed the design flaw in millions of the 
world's computers that will mean they will be unable to recognise the 
year 2000. And if they can't, then we will see a series of 
shutdowns, inaccurate data, faulty calculations. 

Because the difficulty is as far flung as the billions 
of microchips that run everything fron farm equipnent to VCRs, this 
is not a challenge that is susceptible to a single government progran 
or an easy fix. Zt is a complex test that requires us all to work 
together every government agency, every university, every 
hospital, every business, large and small. 

Z came here today because Z wanted to stress the urgency 
of the challenge to people who are not in this room. So often one of 
the wry and amusing aspects of the nature of ay work is that when Z 
give a speech like this Z an typically preachii^ to the choir, as we 
say back home. But hatefully the sermon is heard beyond the four 
walls of this room because, clearly, we nust set for^ what the 
government is doing, what business is doing, but also what all of us 
have yet to do to meet this challenge together. And there is still a 
pressif^ need for action. 

The consequences of the aillenniua bug, if not 
addressed, could simply be a rash of annoyances, like being unable to 
use a credit card at the supermarket, or the video store losing track 
of the tape you have already returned — has that ever happened to 
you? It really is aggravating. (Laughter.) It could affect 
electric power — I just want to remind you that Z used to have a 
life and I know about things like that. (Laughter.) It could affect 
electric power, phone service, air travel, major governmental 
service. 
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As the Vice . President said, we're not just taDcing about 
conputer networks, but billions of isbedded chips built into everyday 
products. And it's worth renembering that the typical family hone 
today has more computer power in it than the entire MIT campus had 20 
years ago. An oil drilling rig alone may include 10,000 separate 
chips. 


The solution, unfortunately, is massive, painstaking, 
and labor Intensive. It will take a lot of time to rewrite lines of 
computer code in existing systems, to buy new ones or put in place 
backup plans so that essential business and government services are 
not interrupted. 

With millions of hours needed to re%nrite billions of 
lines of code and hundreds of thousands of interdependent 
organisation, this is clearly one of the most complex management 
challenges in history. Consider jttst one major bank. Chase 
Manhattan. It must work through 200 million lines of code, check 
70,000 desSctop computers, check 1,000 software packages from 600 
separate software vendors. 

The government's Health Care Financing Administration, 
known affectionately by the governors and others as HCFA, which runs 
Medicare, processes almost 1 billion transactions a year. It' s 
computer vendors must painstakingly renovate 42 million lines of 
computer code. 

All told, the worldwide cost will run into the tens, 
perhaps the hundreds of billions of dollars, and that's the cost of 
fixing the problem, not the cost if something actually goes wrong. 

Already extraordinary efforts are underway .by the people 
on the platform — many of you out here and others b^t more must 
be done. He know first we have to put our o%m house iff order, to 
make certain that government will be able to continue to guard our 
borders, guide air traffic, send out Social Security and Medicare 
checks, and fulfill our other duties, we've worked hard to be ready. 
Z set a government-wide goal of full compliance by March of 1999. 

John Koskinen is heading our council on the Y2K problem. I've met 
with the Cabinet and charged them personally to produce results and 
report quarterly to 0MB on progress. He* re working with state and 
local governments to do the same thing. 

He have made progress. As has already been said, the 
Social Security Administration has more than 90 percent of its 
critical systems ready. Other agencies, like SPA, FEMA, and the VA, 
are well on their way to meeting our goal. But not every agency is 
as far along as it should be. Z have made It clear to every member 
of my Cabinet that the American people have a right to expect 
uninterrupted service from government and Z e)q>ect them to deliver. 

I want to thank the thousands of individuals who are 
working to prepare our government and to make sure we can stay open 
for business. Z especially want to thar.k the Vice President and John 
Koskinen and the people who are %rorking with them at OHB and 
elseirhere. And I very much appreciate these members of Congress who 
are here and the extraordinary bipartisan interest and support 
meeting this challenge has engendered. 

Zn my proposed balanced budget for 1999, I asked 
Congress to fund this initiative on a one-time basis, because it is 
literally a onee-in-a-lifetime challenge. I urge the Congress to 
fully fund it and to provide contingency funding so that %re can 
respond the unforseen difficulties that are sure to arise as we near 
January of 2000. He have worked closely with Senators Bennett and 
Dodd and Congressman Korn and Cong r essman Kucinich end the other 
members irtio are here — Congressmen LaFalce and Turner and others in 
the Congress. As Z said, there has beer a heartening amount of 
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interest in this by people who ectuelly know quite a lot about it in 
the Congress, and that *8 a very good thing. 

I think we all understand that this is a case where we 
cannot allow, even in this election season, any shred of partisanship 
to ixq)inge on the national interest. We, after all, only have 17 
Bonths to go. 


I believe we also have a rcle to play in helping to meet 
this challenge around the %#orld. Surely we can't be responsible for 
the preparedness of other countries, but I can nake the sase argument 
I just made about the ZKF and Russia ~ if increasingly our 
prosperity is tied to the well->being of other nations, it would 
obviously have adverse consequences for us here at home if a number 
of our trading partners had major malfunctions. 

When I was meeting with the world's major Industrial 
organizations in Birmingham, England, a few months ago, l brought 
this up and z found that we had become far more invested in this and 
involved in this than some other major nations. When Z was in 
Santiago, Chile, at the Summit of the Americas, I brought it up in 
our private meeting aiid a number of countries had literally only 
begun just to think about the pr^lem. 

So I- think it is important that the United States 
recognize that the more we can do to help other countries meet this 
challenge in a timely fashion, the better off our o%m economy is 
going to be and the more smoothly our own businesses will be able to 
function as we pass over into the new millennium. The United States, 
to try to help, will provide $12 million to support the World Bank 
Year 2000 fund for developing countries. 

Z also want to say %rhat we all know and what you can see 
frcm the platform, which is this is not a government problem alone. 

By far the most significant potential risks fall in the private 
sector. Large firms already have spent hundreds of millions of 
dollars to make sure their systems are ready. Many have spearheaded 
remarkable efforts to make sure their firms and their whole 
industries are ready. We're encouraged that dozens of firms and 
thousands of people on Wall Street last night began a simulation to 
test Aether they are ready. And the telecommunication, banking, 
electric power, and airline industries all deserve praise for the 
seriousness with ^ich they are taking the challenge. 

Z want to compliment one person back here in particular. 
Steve Wolf came all the way back fz^ Africa, got here at 3:00 a.m. 
in the morning to show up to manifest his understanding of the 
importance of this challenge to the airline industry, and he is still 
breathing the rarefied era of Kilimanjaro, so we thank him especially 
for doing that. (^>plause.) 

But let me say, in spite of all this progress, in the 
business sector just as in the government sector, there are still 
gaping holes. Far too many businesses, especially small- and medixim- 
sized firms, will not be ready unless they begin to act. A recent 
Walls Fargo bank survey shows that of the small businesses that even 
know about the problem, roughly half intend to do nothing about it. 
Now, this is not one of the eummer movies where you can close your 
eyes during the scary parts. (Laughter.) Every business, of every 
size, with eyes wide open, must face the future and act. 

So today Z would issue three challenges to our business 
community. First, every business must take responsibility for making 
sure it is ready. Any business that approaches the New Year armed 
only with a bottle of champagne and a ncisemaker is likely to have a 
very big hangover on New Year's morning. (Laughter.) Every business 
should assess its exposure, asks vendors and suppliers to be ready as 
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well, and develop contingency plans, as we are, in case critical 
systems or systems of vendors fail as ve move into the year 2000. 

I want to especially thank Aida Alvarez and the Small 
Business Administration and its supporters in Congress. And I thank 
you, Mr. LaFalce, in particular, for the work that has been done to 
spread the message in the small business community. 

And I'd like to salute one firm represented here, the 
Torrington Research Company, which makes fans for cars and computers. 
It has only 55 employees, but they've taken the time to check their 
system and by the end of this year they will be ready •>-by the end of 
this year. I want every small business in America to follow their 
lead. (Applause.) 

As the Vice President said, we need literally an army of 
programmers and information technology experts to finish the task. 
Many of the computers involved are decades old; some of them use 
programming language no longer used or even taught. There is a 
wealth of )aiowledge in America's tens of thousands of retirees who 
once worked in the computer industry or government as prograxmers or 
information technology managers. I'm pleased to announce that the 
Department of Labor will expand its jobs bank and talent bank to help 
to meet this challenge. And I thank Secretary Herman and Deputy 
Secretary Higgins for that. 

The AARP has also agreed to help out. And we're 
reaching out to civilian and ‘military retirees who did this work for 
government before. I will ask these older Americans to set aside 
their well-earned rest and help our nation to meet this challenge. 

Second, businesses should exchange and pool information 
among themselves. It makes no sense for every firm to have to 
reinvent the digital wheel. Businesses should be able to benefit 
from the experiences of other firms in the same situation that have 
found solutions or identified new obstacles. 

Today, too many businesses are understandably reluctant 
to share information, fearing legal complication. We have to take 
prudent steps to clear away any legal barriers to effective action. 
Earlier this month the Justice Department stated that competitors who 
merely share information on how to solve this problem are not in 
violation of the nation's anti-trust laws. We need to get that 
message out there loud and clear: no one should be afraid to help 
another company to deal with this challenge. 

There is more we can do. This week I will propose good 
Samaritan legislation to guarantee that businesses which share 
information about their readiness with the public or with each other, 
and do it honestly and carefully, cannot be held liable for the 
exchange of that information if it turns out to be inaccurate. And 
here, too, time is of the essence. 

Our third challenge to business is that you should take 
responsibility to accurately and fully tell your customers how you're 
doing and what you're doing. By letting customers know they are on 
top of the problem, businesses can help to maintain confidence and 
override overreaction. This is very important. It is important that 
we act and not be in denial; it is also very Important that we avoid 
overreaction from people who hear, oh my goodness, this problem is 
out there. And so we have to do both things. 

The proposed Good Samaritan law will give companies the 
confidence they need to ensure that they keep their customers 
informed. If ordinary citizens believe they're being told the full 
story, they'll be far less likely to act in ways that could 
themselves hurt our economy. 
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He can do more to help businesses reach these goals. 
Later this month our Council on the Year 2000 Conversion will launch 
a national campaign for year 2000 solutions, to promote partnerships 
between Industry groups and government agencies, with the goal of 
sharing information about what actually works and to prod 
organisations at every level to get ready, making ceirtaln government 
services are not interrupted, minimizing disruption to commerce, 
encouraging businesses to share with each other and report honestly 
to customers, and above all, every business in America taking 
responsibility for being a part of the solution in the year 2000 
conversion. These are the ways we, the American people, can be 
prepared to meet this challenge. 

Now, no one will ever find every imbedded microchip, 
every line of code that needs to be rewritten. But if companies, 
agencies, and organizations are ready, if they understand the threat 
and have backup plans, then we will meet this challenge. 

The millennium bug is a vivid and powerful reminder of 
the ways that we are growing ever more independent as we rise to the 
challenges of this new era. When our founding fathers urged us to 
form a more perfect union, I don't think they had this in mind, but 
they might be quite pleased. The powerful forces of change that have 
created unimagined abundance also bear within them, as is consistent 
with human nature, the possibilities of new and unexpected 
challenges. 


But if we act properly, we won't look back on this as a 
headache, sort of the last failed challenge of the 20th century. It 
will be the first challenge of the 2l8t century successfully met. 

That is the American way, and together we can do it. 

Thank you very much. (Applause.) 

END 11:35 A.M. EDT 
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Mr. DeSeve. Mr. Kosklnen, the Assistant to the President, has 
met with the United Nations. I believe that they’re either in the 
middle or going to have a resolution in that arena to try to make 
their folks more aware as well. 

But we can use your help, please. Mr. Davis is right. The admin- 
istration — ^the buck stops here. But it doesn’t mean that we can’t 
forge a good awareness partnership with the Congress as well. 

Mr. Horn. Well, we thank you for that. And we will be back with 
some more questions, but I’m going to yield Mr. Davis 13 minutes. 

Mr. Davis. I just need a couple more minutes. 

Mr. DeSeve, let me say one more thing. Mr. Kucinich brought up 
the election. If this thing fails, the elections in 2000, the voters will 
have their say, and we don’t have to look very far. I think the ad- 
ministration is going to have to do some fast dancing if this doesn’t 
go well. 

We all have an interest in making it work, because they’re prob- 
ably going to take it out on whoever is there, anybody that’s been 
adversely affected. 

Let me ask a question. It seems, even after testing, systems still 
fail with some frequency, with some percentage. This is why con- 
tingency pl annin g is SO important. Let me start with Mr. McCabe, 
and we will go on. 

Mr. McCabe. Yes, sir. Mr. Davis, our state of practice and per- 
fection of the software testing normally is abysmal; and with this 
particular problem, it’s really scary. And one reason why systems 
fail after testing is testing is last in the phase, and it’s usually — 
it usually runs out of money as cut. And that’s particularly true 
when you have a fixed date like the year 2000. 

I just want to come back to a couple of points I was trying to 
make before. It is such a broad problem. I’m taking a fairly sin- 
gular view, and the reason is that I feel very strongly about — and 
just a couple of points. 

Our published metrics about how you measure the stuff made it 
available to what used to be the National Bureau of Standards, 
now NIS, and also GAO. It is true that no particular kind of testing 
will guarantee success, but it’s also true that systems are not being 
tested. The job is both bigger than what it seems, because the key 
things are not being tested, and smaller than what it seems, be- 
cause often 95 percent of the testing is being wasted. 

Now, another point I would like to make 

Mr. Davis. Can you elaborate on that? 

Mr. McCabe. Sure, the fact is, when you build or change a gen- 
eral system, you have to test all of it, all the permutations, all the 
interfaces, and so forth. It happens to be the case with the year 
2000 that is date specific and the dates are only of the order of 
maybe 5 to 10 percent dense within the code. That means, when 
you change them, you have to test exactly that. Really what it 
means is you have to quantify and visualize where that testing is, 
and that’s not particularly being done. So the mistake that is being 
made is to try to get rigorous testing at the unit or smaller level 
companies are trsnng to test all of the transactions, when, in fact, 
95 percent of it is wasted emd indeed the core testing is not being 
done. 
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Now my other colleagues have mentioned, for example, that 
there’s no replacement for end-to-end testing. That’s absolutely 
true. However, Mr. Davis, when the foundation isn’t strong or effec- 
tive, when it’s particularly weak, what happens is, as your question 
alluded to, is you think you’ve done your testing and you’re testing 
end to end and it doesn’t work and you regress because the founda- 
tion was nowhere near where it should have been. 

So this comes from our experience — I’m kind of in the trenches 
with this. We’ve seen a lot of systems. Federal and commercial sys- 
tems, that have been claimed to be correctly tested, including the 
ones that the IG did. 

Mr. Davis. Let me ask this, when fixed and tested systems Eu-e 
later truly tested, what percent failure are we getting? 

Mr. McCabe. We’re getting very, very high percent failure, just 
normally. 

Mr. Davis. Do you have any specific examples you can share 
with us? 

Mr. McCabe. There’s statistics that something like with projects 
that are over $4 or $5 million, about 80 percent of them fail. An 
enormous failure rate with very, very high dollar projects. 

Mr. Davis. In fact, you could test it and it can go perfectly and 
once you get into real life experiences, you can’t test for every con- 
tingency. ^at’s also a problem, isn’t it? 

Mr. McCabe. That’s also a problem. It happens in this particular 
case we have leverage, and the leverage is that the dates are not 
that dense. The dates are relatively infrequent, as of the order of 
maybe 5 or 10 percent. So the leverage one can use is to test spe- 
cifically at that. 

And look at it another way, sir. If you don’t test those things, 
there’s no hope that this stuff is going to work. So what it really 
comes down to is directed testing to be sure that that foundation 
is right euid then build upon that. 

Mr. Davis. How would you run a test on something like inter- 
national trade? 

Mr. McCabe. The way you would run a test is: first find out 
within the software systems that perform where the dates are. And 
then, second — actually, you test before you change the code. Be- 
cause the reason why you do that is you put errors in changing the 
code that you may or may not know if they were legacy errors. So 
you establish them on the tests you have, which ones are going to 
hit the dates, and then you exchange it and repeat the test on 
those dates. And a set of tests, that would consist of, Mr. Davis, 
among all the tests is perhaps about 10 percent. 

Mr. Davis. Let me ask Dr. Grabow the same question. How do 
you test for international trade? 

Mr. Grabow. I would like to — ^I understand where Mr. McCabe 
is coming from in terms of a technologist, but as a businessman, 
which I am 

Mr. Davis. We’ve got all of these experts, and you can’t agree on 
all of this stuff. 

Mr. Grabow. We agree very much. I agree with his principles 
and testing completely. However, when you look at a trade trans- 
action, one individual trade transaction where a Chicago company 
is purchasing goods from China, in that one trade transaction there 
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are anywhere, as I mentioned earlier, 10 to 12 different organiza- 
tions in both countries, at least, maybe even other countries. 

So picture in your minds the globe, and you have two, a buyer 
and a seller, you have two port authorities, maybe a railroad, you 
have a couple of trucking companies, two banks, an insurance com- 
pany, warehousing facilities, insurance companies, and I think I’ve 
covered the waterfront. But all of those participants are involved 
in the purchase and sale to get goods back to Chicago, IL. 

The second part of this trade transaction is the sequential 
steps — the flow of paper, the purchase orders, the releases, the 
shipping documents, the money, the Customs inspections. All of 
this is done electronically. _ 

Where I beg to differ a little bit is on how you cannot test a trade 
transaction 

Mr. Davis. You have the financing, all of those things? 

Mr. Grabow. All this stuff has to work — just picture in your 
mind’s eye all of these different technologies, all these different 
companies trying to communicate back and forth, and if you start 
to have some system failures — ^it is impossible, as you look at the 
business transaction, to test it, and that’s my point. ^ 

But from a businessman’s point of view, that’s why I’m very con- 
cerned about foreign trade. Foreign trade is 20 percent of our GDP. 
And what I’m saying, in two key elements, 20 percent of GDP in 
foreign trade and approximately 19 percent of the Federal Govern- 
ment, and if you come into the public sector, you’re over to one 
third, and you’ve got half the economy that is at risk of this issue. 

The other point that I’d like to stress very significantly is the 
timeline is not 18 months. In our research, we see system failures 
increasing substemtially as this year comes. 

Mr. Davis. You see them right now with transactions? 

Mr. Grabow. We see them right now and increasing substan- 
tially where they’re going to be very visible. Our concern is that the 
American people be prepared. 

Now one of the things they don’t like are surprises, and what 
frustrates our participants, our investors, and others is the lack of 
focus. Because I still have people that I talk to that are, “knowl- 
edgeable,” and they still don’t think there’s a problem. Yet all of 
us can sit in the room together today and agree that we’re facing 
some very significant issues. 

And so what frustrates me, as I sit here, is why can’t we break 
through this little barrier? Why can’t we take this to the people 
and tell them what we see? 

Because the point I would see as a practitioner of technology and 
as a businessman, if you gave me all the systems that you’re show- 
ing me in the Federal Government, 24 agencies, and you’re trying 
to tell me they’re going to be ready by sometime next year, I would 
challenge that. I don’t mean to be argumentative, but 

Mr. Davis. You’re talking about critical missions versus others, 
and I think we just keep running. I hear you. 

Mr. Grabow. Yes. 

My other concern is the quarterly report that came out last quar- 
ter where you listed 15 of the agencies that reported out; 24 said 
they didn’t know what an embedded system was or they didn’t 
know if they had any problems. 
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Mr. Davis. That sounds like the agency where somebody said, 
well, it couldn’t be that comphcated. We’re only doing 1900 in that 
case. 

Mr. Grabow. The problem that I see is we don’t have a clear def- 
inition of what is year 2000, and all of this discussion today is — 
again, I come back to information processing. Let’s talk about oil 
refineries. Let’s talk about pipelines. Let’s talk about 

General Motors came out and made a very clear statement, un- 
equivocal, in Fortune Magazine in April 1997 — excuse me, 1998, 
where Segenda indicated that they had catastrophic problems at 85 
of their manufacturing plants around the world. 

Now, let’s look at the auto industry as a business. They have ap- 
proximately 85,000 suppliers glob^ly that take care of those 
plants. What we’re saying, to have auto production continue not 
only does GM have to have all of their information systems and 
embedded systems working properly, but the entire network of ven- 
dors that support it with all the infrastructure has to be working 
properly. And as I’m looking at this issue and understanding the 
technology, to me that seems like a very, very difficult challenge. 

And I love challenges, but I think it’s also practical that we start 
to say, this isn’t going to probably work that smoothly. So what do 
we need to do, how do we prepare the American people? Again, 
we’re forecasting unemplo 3 rment to start rising in 1999, and every- 
body is enjo 3 nng a great time right now. 

Mr. Davis. We ^ways are asking for specific anecdotes. And I 
did read about the company in England where their corned beef in- 
ventory showed 02 as the expiration date, and it was destroyed be- 
fore they discovered it, because they thought it was 96 years old. 

Do you have any specifics of where this is going on in — ^we know 
it’s going on every day, but 

Mr. Grabow. I’ve heard of it in drug manufacturing, for example; 
food processing which you brought up. In the case of powerplants 
where they have advanced the system date 

And what we haven’t talked here yet today is how regulatopr 
intervention is eventually going to cause some disruption also in 
the economy. By that I mean the 1 year plan is a 550 megawatt 
plan. They advanced the date, and within a few minutes it shut 
down because of the flue gas monitoring system right at the top of 
the stack. 

If you can picture that tall stack, there’s a monitoring system up 
there with a sensor and a circuit board and other equipment. It 
failed. So maybe somebody has to go up there and change that 
piece of equipment, maybe has to change a sensor or maybe you’re 
fortunate where it’s a simple 

Mr. Davis. If you fix that there could be another 50 things 
wrong? 

Mr. Grabow. Exactly, but the point is, when you come back to 
embedded system — and what I would encourage the committee to 
do some work on is the production side of embedded systems. It’s 
far more difficult to remediate. It takes a longer time. And it’s, in 
our view, going to have greater economic consequence. 

Mr. Davis. 'Thank you. 
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Mr. McCabe. Mr. Davis, just a comment. I think we’re agreeing. 
The point Mr. Grabow was making when you modify system X, Y, 
Z, you have to integrate across and do the other testing. 

The point I’m trying to get is system X doesn’t work; system Y 
doesn’t work; and system Z doesn’t work. Until they work in some 
reasonable fashion when we do some reasonable testing, the inte- 
gration testing is no doubt not going to work. 

Just to add to all of this. I think DOD has done a number of good 
things, and there are some examples where it’s being done well. 
One is STRICON within the Army. I think they got relatively — ^fo- 
cused on the RACON of day testing and so forth, and they’ve done 
quite, quite well. 

We adways get in the defensive within the Government when, in 
a lot of cases, the work the committee leads is, in fact, exemplary. 

Mr. Davis. We won’t read about the success stories. We will read 
about the failures. That’s the problem with this. 

I jdeld back. 

Mr. Horn. I thank the gentleman. 

Let me ask a couple of questions. 

In terms of the discussion we’ve heard here and the degree of 
pessimism, does that mean that the market has also discounted the 
year 2000 problem? Do you see particular industries where there 
seems to be a discounting of this, or are people more likely to wait 
till the end of 1999? 

Do you want to just start down the line with Mr. Webster? Any 
thoughts on that? 

Mr. Webster. If you can explain what you mean by the market 
discounting the year 2000 problem? I mean, have they already 
taken into account, or are they simply ignoring it? I’m not sure I 
understand what you’re asking. 

Mr. Horn. Well, I’m just saying, do you already sense move- 
ments in the market based on the extent of computerization that, 
one, the industry might depend on, as opposed to another one, or 
their sensing of a failure to solve the problem? Is there any evi- 
dence of that at this point? 

Mr. Webster. I have seen no evidence of that actually. 

Mr. Horn. OK Mr. Simpson. 

Mr. Simpson. I don’t know if the window is there yet. There’s a 
moving window of awareness. I don’t think it has reached that. 
When it reaches that, certainly overnight everyone will pEmic Emd 
then you’ll see some serious problems. 

Mr. Horn. Mr. McCabe. 

Mr. McCabe. Yes, we have seen a couple of industries where, in 
fact, there are maybe four or five major competitors, and maybe 
four of them are not going to make it, which is typical, and one is. 
And everybody thinks about this as a negative investment — that is, 
it just makes us survive — ^when, in fact, what they’re doing is 
inventorying all their systems, which you have to do, and figuring 
out the architecture of the system, changing them, remediating 
them, testing them and, again, getting them ready for client server, 
for interfaces and so forth. 

'The bottom line is, they will be surviving. The transactions will 
run. They will be in business in the year 2000 when, in fact, to a 
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certain degree, all of the competitors will not. So, in truth, they will 
be in better shape. 

And they did some analysis, and it took so much money in terms 
of advertising and so forth that — ^by market share in normal 
times — and it turns out to fix the year 2K problem there’s substan- 
tially less than that amount of money. So there’s positive ways in 
which you can think of this. 

Mr. Horn. Mr. Steinberg. 

Mr. Steinberg. I’d love to be more optimistic about it, but I don’t 
think, if we’re talking about awareness and the need for disclosure, 
that corporations have come to grips with it enough for the market 
to recognize that they have a discount to make. I think that stage 
will come 6 months to a year from now. 

Mr. Horn. Well, you’re saying it will come in 1998? 

Mr. Steinberg. Pardon? 

Mr. Horn. It will come in 1998? A year ahead? 

Mr. Steinberg. I am not an economist by training, so that’s just 
my wild guess, based on the amount of work that’s being done to 
raise the awareness and forged disclosures. Because you can’t have 
a market discounting something that they don’t know about. 

Mr. Horn. Well, people aren’t stupid. They watch this stuff pret- 
ty carefully. 

I remember in 1954 Professor Galbraith came down from Har- 
vard and suggested to a congressional committee that they increase 
the marmns. They were hardly nonexistent, up to 90 percent. The 
market Fell $1 billion worth, and that was a real billion in those 
days. And Professor Galbraith got a postcard addressed to the 
Communist, Cambridge. Somehow the Post Office delivered it to 
Professor Galbraith, .^d he took some pride in that, and it was on 
his bulletin board for all of his class to see. Anyhow, that’s 1954. 
We’re a little more sophisticated, presumably, in 1998. 

Mr. Steinberg. Well, as ein outsider to the market, I haven’t 
seen any indication that it has gone down. Again, this is not 

Mr. Horn. It’s interesting. 

Mr. Grabow, any thoughts on that? 

Mr. Grabow. Yes, Mr. Chairman. There’s actually three points 
I would like to make on your question. 

The first is talking about the equity market. At this point, I do 
not believe that there is emy indication going on with investors, a 
recognition of this problem. And it stems — and for a couple of rea- 
sons, one is, which the SEC acknowledged just a few days, even 
though they put out Staff Legal Opinion No. 5 some months ago, 
it hasn’t been working well enough. 

It goes back to my earlier comments that many corporations still 
don’t have in their mind what the definition of year 2000 is. Al- 
though, they’re trying to abide by Staff Legal Opinion No. 5, there’s 
some confusion as to their actual disclosure. 

And Ms. Unger, I believe, one of the SEC commissioners, spoke 
just a few days ago, and they’re going to try to tighten up these 
standards. 

So once more information does come out. I believe there will be 
a correction in the U.S. equity market; and what’s going to happen, 
in our view, is a contraction of PE multiples. We’re at this historic 
high over the last basically 40 years. And just in terms of the nor- 
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mal course of events, a correction would be healthy. But when you 
add in what’s going on in Asia right now and then when you begin 
to look at the fact that there are declining corporate profits occur- 
ring, a natural correction is about, in our minds, to unfold. 

And this is part of this scenario. When we come to a global eco- 
nomic recession, we’re looking at Asia as kind of the precursor to 
this happening. And I might add that what’s going on in Asia, the 
focus there right now is trying to,“make payroll.” ./Gd the anecdotal 
and direct evidence that we’re finding is not a lot of remediation 
occurring in some of those countries and so that brings further con- 
cern to us. 

The second area that I would like to bring out, which was very 
important, is the credit markets, the fixed income markets, which 
get very little discussion but are very substantial in size and vol- 
ume. i^at we see happening later this year and clearly in 1999 
is that companies are going to be denied access to credit. We see 
credit rationing and potentially a credit crunch, somewhat like we 
saw in the 1980’s when we had the real estate crisis, and that 
money is not going to be lent by financial institutions, by commer- 
cial b 2 mks, by finance companies and pension funds to those insti- 
tutions that are not going far enough along in the process of com- 
pliance. 

Would you want to lend money if you were the chairman of a fi- 
nancial institution if you didn’t believe in their compliance pro- 
-am? And so what we’re saying is that behavior is going to change 
in those financial institutions, and the/re going to choose to invest 
in Government bonds as a safe harbor, much like they did in 1980. 

And the other thing that we would be looking at is that, in the 
commercial banking industry, that most likely the Feder^ regu- 
lators — and this is my own spoliation — ^but at some point will 
probably cause the financial institutions to have greater reserves 
required for those loeins made by the banks to corporations that are 
not doing enough to protect those investments. 

The last thing I would like to bring up, that I think is also im- 
portant that comes right into the area of Government, that is in 
our due diligence. With many State and local governments, as well 
as our own Federal Government, a lot of our revenue is due to the 
high employment levels we have had and the high tax revenues 
and the high capital gains. This same concept has worked in States 
and cities and counties. Many of these governments are flushed 
with money, and what we see happening in the next 18 months or 
so, if you stsirt to get a change in the economic conditions, is that 
their coffers will start to run dry or to slow up in terms of the abil- 
ity to receive revenues from this aspect of the economy. 

At the same time, they are going to be running into a position 
of having increased cost from social services, and they are going to 
be possibly in a pinch in terms of financing, depending on where 
they are in their overall capited program, and some States I have 
talked to are not far enough along in terms of actual spending, and 
if that becomes a problem and they are out tr 3 dng to raise credit, 
out trjdng to raise financing when their credit qu^ity is declining, 
it could be a significant issue on their ability to finance. 

Mr. Horn. I won’t subject the Government officials to this, un- 
less you want to comment. What I do want, for one last question 
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on my part, and then back to Mr. Kucinich and Mr. Davis, and that 

is, if you have got to prioritize what must be done for sure, let’s 
start talking about the power grid, be it electric or nuclear, solar 
or windmill or whatever it is, going into that system. Would that 
be No. l\on your list, and if that isn’t No. 1, because it seems to 
me everything is {iffected by that in terms of the economy running 
and the hontepwners protection, and all the rest of it, if the grid 
is not No. 1, wh^at^should be, or are there two No. Is? 

Mr. DeSeve, any liiQu^hts on that? 

Mr. DeSeve. I dOn’fKapw if there are two or three or four, Mr. 
Chairman. You certaihlyy^in terms of the power grid, identified 
something we are extremely concerned about. I also would asso- 
ciate myself with Mr. Simpson’s remarks on Telcom and the effects 
on international trade. I think those are the three things we spend 
the most anxiety on, and not the most time on necessarily, but the 
most anxiety on. 

Mr. Horn. Dr. Stillman. 

Ms. Stillman. There is no question that the power grid and tele- 
communications infrastructure are the base on which everything 
else rests. When you think of conducting a war, the first objective 
is to destroy the enemas power and their telecommunications. 
They are the sine qua non, without which nothing. They are crit- 
ical. 

Mr. Horn. How about it, Mr. Grabow. 

Mr. Grabow. First thing is, I always want to be friendly to a 
lady, because if she is going to go to war, I want to be careful here. 
But I would agree. The one thing I would add is water. The basic 
infrastructure is very critical, along with water, and as I men- 
tioned, the Government itself and its ability to function properly. 

Mr. Horn. Do you agree with that, Mr. Steinberg? 

Mr. Steinberg. Well, I am from the frozen north, and as some 
of you may know, we had freezing rain last winter. I lived through 

it. It was a pain in the butt. You can’t do very much without elec- 
tricity and telecommunications. And in many cases, that also in- 
cludes water because without the electricity, you don’t have pumps 
flowing. There is nothing more important right now. 

Mr. Horn. Mr. McCabe. 

Mr. McCabe. I don’t have much to add. I think phones, water, 
electricity, and I live nearby, so air conditioning as well. 

Mr. Horn. Well, if we give you power, you have to have an air 
conditioner you can turn on or off. 

Mr. McCabe. I am not sure, but the air-conditioners may not 
work. 

Mr. Horn. Mr. Simpson. 

Mr. Simpson. I would say power is the primary one. Tele- 
communications, there is always a backup. The problem we have 
with telecommunications, when you speak to them, they say we 
have backup generators. Backup generators are designed to run for 
5 minutes or 5 hours. The city of Oakland learned, to its cost, the 
backup generators will not run for 24 hours and beyond. They fail. 
The fuel to power backup generators is in the ground, you can’t get 
it out to refresh them because there is no electricity for the pumps. 
There is always another way another message can get through. 
Power, without it, everything goes. 
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Mr. Horn. OK. Mr. Webster. 

Mr. Webster. The only thing I would add to this is in our focus 
on power grid, per se, we have to look long and hard at the oil 
issue, oil production, shipping and so on because that can grind 
things to a halt very quickly as well, even if the power grid itself 
is working. 

Mr. Horn. Did I call on you, Mr. McCabe? 

Mr. McCabe. Yes. 

Mr. Horn. OK. I think we got everybody’s answer on the record 
then. I will now yield 13 minutes to the gentleman from Ohio. 

Mr. Kucinich. I wanted to go back to some of these questions 
that deed with the power grid, in particular, focusing on nuclear 
power. Since so many of the safety features which exist on nuclear 
powerplants are programmable, and that is simply due to the 
watchful eye of the inspectors onsite, have any of the panel mem- 
bers who have looked at the power issue also looked at the implica- 
tions for the safety of nuclear powerplants? 

Mr. Simpson. The safety of the nuclear powerpl8mts I don’t think 
is a real major concern. The regulatory systems are very strong, 
they have a good oversight. If all else fails, they will fail safe, that 
isn’t the problem. The problem is if they are not producing, the 
whole grid is gone. We rely, especially in the Northeast, on nuclear 
power, and if they go out for safety reasons and the lawyers are 
currently saying, hey, let’s take them off line and bring them on 
slowly, if that happens, there will be a rolling blackout. So we need 
to test them well before the event and keep our fingers crossed. 
That is the one thing with 2000, we don’t really know what is going 
to happen. We can have computer models, we can have predictions, 
we will not know until real time 2000 clicks over. 

Mr. Kucinich. Let’s go, then, to real time 2000. What kind of 
readiness preparation does the Government have, starting on that 
day; what kind of task force or task forces do you have set up be- 
ginning on that day? 

Mr. Simpson. Can I just address the communications one here? 
It concerns me an agency that is responsible for the foreign affairs 
of this Nation has got an F. The communications from embassies 
and even more so from consulates rely on the phone systems of 
that country. When the twist au pairs go out of the building, they 
are not on AT&T, they are not on Baby Bell, they are on the Bot- 
swana Power, Light and Ice Cream Co., or whatever the local one 
is. We need to have a plan B so that if there are any bangs on the 
ground or if Pakistan and India start playing games, we are edert- 
ed. 

The last thing, as I said, the President needs to find out is that 
war has been declared in Pakistan and India from CNN. We have 
got to get this communications network around the world up and 
running and tested, the backup circuits tested, and the supplies to 
all nations, not just the United States, well before 2000. 

Mr. Kucinich. I can readily accept the logic of that as common 
sense. I guess maybe Mr. DeSeve could answer on behalf of 0MB. 
Let’s go right to the year 2000. We are there. What will you have 
in place, as of that date, for problems that come up? Here we are, 
January 1, what do you have ready, do you have teams of people 
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ready to go into mission critical, as well as other areas of the econ- 
omy? 

Mr. DeSeve. We are working in two directions simultaneously. 
Direction one is with the Federal Government’s own responsibil- 
ities. We will have a series of contingent plans for what we call 
business operations, including the operations of the Federal Emer- 
gency Management Agency and others, to be able to respond as 
necessary to any situations that might occur. 

Mr. Kucinich. OK. Let’s stop right there. Let’s talk about the 
Federal Emergency Management. V^at will their role be beginning 
on January 1, the year 2000? 

Mr. DeSeve. They will have the same role they have had up 
until now; that is, first, education of the State emergency offices as 
to what the problems might or might not be. I can’t speculate that 
there would or wouldn’t be any, but the first role is always to work 
in counterpart with their State emergency offices. 

Second, to coordinate the Federal resources. They coordinate 
with the folks at SBA on loans and the folks at HUD on housing 
and so on, to be able to be sure. They coordinate, also, with vol- 
untary agencies. So they bring to the area, to whatever area what- 
evei', supplies that are needed. That is just an example. 

Mr. Kucinich. Will there be, for example, disaster relief pro- 
grams for Y2K? 

Mr. DeSeve. You have taken me to a level of speculation in 
which I really can’t engage on a wholesale basis. 

Mr. Kucinich. But, wait a minute. If I may, a lot of this is specu- 
lative, but unless we agree that everyone is going to be Y2K com- 
pliant in the year 2000, you know, we don’t have to be too con- 
cerned. But since we have em understanding that there will be 
areas that will not be Y2K compliant, we are not really sure which 
ones those are, we have a role for the Federal Emergency Msmage- 
ment. How broad will their powers be? I mean, it would be nice for 
us to know. Are they being prepared to take a leadership role in 
direction of the manifest problems that could occur during the tran- 
sition at the year 2000? 

Mr. DeSeve. Right. FEMA again is 1 of the 30 sectors we work 
with, and they have been very responsive, as they have been over 
the course of the last 5 years, in preparing themselves for dealing 
with each of these eventualities. I don’t have the specific plan for 
that in front of me today, but they have been very much focused 
and have worked very closely with the President’s Year 2000 Con- 
version Council; they are an active member of that Council. 

Mr. Kucinich. I understemd in your presentation, you are talk- 
ing about proceeding simultaneously on a number of tracks. I 
mean, one, would you say, obviously, we are talking about deter- 
rence, which is prevention, preparation; all those things are in one 
category. The other part is where do you get to 2000. We don’t have 
a Pollyanna notion that somehow there won’t be any problems, but 
if we prepare for that particular eventuality, as I know so much of 
the work that Mr. Horn has been involved in points to that, it en- 
ables us to quell the panic, which we certainly don’t want to hap- 
pen, because it’s likely that panic could happen. I think it is very 
important for the Federal Emergency Management, at some point, 
Mr. Chairman, to come before this committee and talk specifically 
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about what its role will be starting from the year 2000 and coordi- 
nating the direction, perhaps, of specialized teams to help go in and 
grapple with the difficulties that an industry might be having or 
a major company or concern or State and local government, be- 
cause this is a different kind of emergency. If we knew, for exam- 
ple, that weather reports portended, you know, serious storms, we 
would get ready. If, you know, like in the movie Deep Impact, even 
though it’s one of those fables that is nice to watch because you 
don’t think it will ever happen, implied a degree of preparation 
that people could make, knowing that this society could still sur- 
vive, but knowing that there would have to be certain types of ex- 
traordinary relief. 

I mean. Federal Emergency Management has been primarily in- 
volved in dealing with weather-related disasters, I think for the 
most part, but now this is a technologically anchored disaster, so 
that could occur. Not will, could. It’s like a weather report. 

Mr. DeSeve. I think the other side relates to something Mr. 
Grabow was talking about; that is, in each of the individu^ sec- 
tors, whether it’s the Energy Department or the FCC or the FTC, 
the primary regulator, the primary oversight is provided by a Fed- 
eral agency who worries about those things, and getting it right. 
The SEC causing there to be full disclosure in lOKs and lOQs, 
FERC and the Nuclear Regulatory Commission having the kind of 
oversight that gives Mr. Simpson confidence in nuclear plants, are 
our first line of defense, so they will be out there in addition to 
anything else that goes on. 

Mr. Kucinich. Yes, Mr. Simpson. 

Mr. Simpson. If I can just make one point. On telecommuni- 
cations, this is in the written statement, not in the oral one, is the 
third one in 1999, 2000, for our space assets. The satellites have 
to go through the micro meteorite storm, which if you look on 
NASA’s web site, you will see predicted. That may knock out some 
satellites. It may knock out weather satellites, it may knock out 
communication satellites, it may knock out nothing. Later on in the 
year, around about November, we have solar max 23, with the key 
peaks of it on history. That may knock out satellites, it may knock 
out power grids, we don’t know. We are going to wait and see what 
happens. So we may enter 2000 from a communications point of 
view with depleted space assets, less communications capability 
than we are at now. 

One of the things in contingency planning for FEMA and all 
these other agencies. Defense and State, they have to look at the 
“what if’ scenarios. If the meteorite storm and the solar max take 
out the backup satellites, what level of communications do you 
need to go to? Galaxy IV, one satellite, which we knew was a little 
bit faulty, went off. Well prepared, it took how many days to get 
it back on again. What happens if all the satellites or some of the 
satellites go down? We need to look at that as well. So year 2000, 
as far as communications are concerned, especially on the global 
scale, weather satellites as well, you may have a depleted level of 
service from space. 

Mr. Kucinich. Thank you, Mr. Chairman. 

Mr. Horn. If the gentleman will yield. His pursuit of the ques- 
tion is a very excellent one. I just happened to remember here that 
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in May 22, 1998, on a slow news day, the White House issued Pres- 
idential Directives 62 and 63, which set up, looking at various as- 
pects of our infrastructure, and with infrastructure officers, chief 
infrastructure assurance officers in various departments, the ab- 
breviation for that is C-I-A-0, or CIAO. Which, I guess, is a doomy 
gloomy part that might just mean good-bye, so we are not sure 
what that means. But if we look at the White House like the CIA 
looked at the Kremlin, we might read something into this. Anyhow, 
it’s vulnerability analysis, remedial plans, warnings response, et 
cetera. Along with the gentlemsin from Ohio’s point, I would say it’s 
as one of our contingency plans that we just say sorry, Bulemia 
Air, you can’t use U.S. air space because you are not 2000 
conformant. What do you suggest, Mr. DeSeve, is there any mean- 
ing in this that relates to what we are talking about? 

Mr. DeSeve. I think the meaning is very closely related. I think 
the Commission on Critical Infrastructure, from which those re- 
ports were drawn, anticipated things like the year 2000, as well as 
other potential threats, whether they be technological or threats 
performed by enemies. So I think that putting that in place, the 
critical infrastructure assessment in place, was a step toward Mr. 
Kucinich’s problem in 2000. 

Mr. Horn. Very good. Any other questions? 

Mr. KUCINICH. No. I yield back. 

Mr. Horn. OK. Well, we thank you all for coming. It’s been a 
very enlightening dialog and I appreciate the exchange. 

I might add that last week, the Speaker did announce that this 
committee, along with Mrs. Morelia’s committee, would be the 
equivalent of the Bennett committee in the Senate, and work to- 
gether on that which we have already worked together. He des- 
ignated me as chairman and Mrs. Morelia as cochairwoman. 

Let me thank the staff now for the fine job they did in putting 
this panel together. J. Russell George, the staff director and chief 
counsel, in back of me, to my left, your right. Bob Alloway, profes- 
sional staff member, that is peuticularly involved in this hearing. 
Matthew Ebert, our clerk. Mason Alinger, staff assistant. Betsy 
Damns, Mark Urciuolo and David Graff, interns. And for the mi- 
nority, we have Faith Weiss, the counsel for the minority. Brian 
Cohen, Julie Moses, professional staff members. Earley Green, mi- 
nority staff assistant, and our court reporters have been Cindy 
Sebo and Katrina Wright. 

With that, I adjourn this hearing. 'Thank you. 

[Whereupon, at 3:21 p.m., the subcommittee was adjourned, sub- 
ject to the call of the Chair.] 
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